lxc-3.1.0-bp150.5.10.1<>,5Љ\/!M@eeeGftk%3Nk3|QQGQ]t{AW+2$'i>Z ]H/?/d   E    EaDa a a La +ma +a-`a/Ea1*1La22&3&6&(686j98j:B3j=>>F?N@VF^GtaHaI|aXY\ (a] a^b!cdbegfjlluav&w(ax*ay,z/h/x/|/////Clxc3.1.0bp150.5.10.1Userspace tools for Linux kernel containersLXC is the well-known and heavily tested low-level Linux container runtime.\/s390zp2atopenSUSELGPL-2.1-or-laterhttp://bugs.opensuse.orgSystem/Managementhttp://linuxcontainers.org/linuxs390x test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in lxc@.service lxc.service lxc-net.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in lxc@.service lxc.service lxc-net.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-lxc-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-lxc-update-$service-new-in-upgrade" fi done for service in lxc@.service lxc.service lxc-net.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi#restart_on_update apparmor - but non-broken (bnc#853019) systemctl is-active -q apparmor && systemctl reload apparmor ||: test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset lxc@.service lxc.service lxc-net.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in lxc@.service lxc.service lxc-net.service ; do if [ ! -e "/run/rpm-lxc-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-lxc-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in lxc@.service lxc.service lxc-net.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable lxc@.service lxc.service lxc-net.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop lxc@.service lxc.service lxc-net.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart lxc@.service lxc.service lxc-net.service ) || : fi else # package uninstall for service in lxc@.service lxc.service lxc-net.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi}on[o0E[PX$nH]][mx mn[`[Bw[PܸS';F 5 , cND0 F)+[e~ '%@MhiCms/A큤큤A큤AA큤A큤A큤A큤A큤\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\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-3.1.0-bp150.5.10.1.src.rpmconfig(lxc)lxclxc(s390-64)@ @@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(lxc)libc.so.6()(64bit)libc.so.6(GLIBC_2.13)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.1)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap-progslibgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)liblxc.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.2)(64bit)lxcfslxcfs-hooks-lxcrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rsyncsystemdsystemdsystemdsystemd3.1.0-bp150.5.10.13.0.4-14.6.0-14.0-15.2-14.14.1\ \\@\@\\@\@\X)@[@[[[dC[P}@[!@YeY@YKYYYY[@YX@X@XۡX6@XAXF@W@WW\@W@W@W~D@WZVKV @V @V @UU@U4@T@Tp@Tp@TTA@TTy@TuTl@TN3T&S@S@SSSSSwO@SwO@Sg}@Sg}@S@S@R&RΏ@R<8R/ Qw@Q8@Q,Q,Q$Q#i@P-PPOOO@OU@O (@O@NNN`@N^"@N|@N|@Mߒ@M2@Mk@MbSME@LdL1@K@KJ@JJF@J@J J@IIo@Aleksa Sarai Dirk Mueller Aleksa Sarai Aleksa Sarai Jan Engelhardt Aleksa Sarai Aleksa Sarai Bjoern Voigt Johannes Kastl Johannes Kastl bernd-obs@wachter.fimatthias.gerstner@suse.commchandras@suse.dedcassany@suse.comopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.demchandras@suse.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.dejengelh@inai.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.decbosdonnat@suse.comschwab@suse.decbrauner@suse.dejengelh@inai.decbrauner@suse.decbrauner@suse.decbrauner@suse.detiwai@suse.det1loc@opensuse.orgt1loc@opensuse.orgt1loc@opensuse.orgcbosdonnat@suse.comjslaby@suse.comjslaby@suse.comjslaby@suse.comLed opensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.dejslaby@suse.comjslaby@suse.comjslaby@suse.comcbosdonnat@suse.comjslaby@suse.comfcrozat@suse.commvyskocil@suse.commvyskocil@suse.comfcrozat@suse.comjslaby@suse.comfcrozat@suse.comfcrozat@suse.comfcrozat@suse.comfcrozat@suse.comfcrozat@suse.comjslaby@suse.defcrozat@suse.comfcrozat@suse.comfcrozat@suse.comfcrozat@suse.comfcrozat@suse.comfcrozat@suse.comjslaby@suse.defcrozat@suse.comjslaby@suse.debrian@aljex.comjslaby@suse.dejslaby@suse.dejslaby@suse.dejslaby@suse.dejslaby@suse.delnussel@suse.dejslaby@suse.dejslaby@suse.dejslaby@suse.dejslaby@suse.deadrian@suse.dejslaby@suse.dejslaby@suse.dejslaby@suse.decrrodriguez@suse.de- Rework /var/adm/update-messages handling to be far less complicated, and more packaging-friendly (by update-messages be owned by the rpm) as well as storing the update message in a autoconf-templated source file.- fix apparmor dropin to be compatible with LXC 3.1.0- Avoid wrong permissions warning by conditionally setting the setuid bit based on what version of permissions is available in that distribution (makes no difference but results in less confusion to users).- Fix builds on SLE12, by depending on apparmor-profiles instead of apparmor-abstractions. In addition, remove the Requires on abstractions.- Trim project history from package description.- Update to LXC 3.1.0. The changelog is far too long to include here, please look at the changelogs posted on https://linuxcontainers.org/. boo#1131762 * Includes fixes for CVE-2019-5736 bsc#1122185. + pam_cgfs is now provided by this package, since upstream has moved the sources to LXC (it used to be part of lxcfs). * All of the patches have been upstreamed or are no longer relevant: - 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch - 0001-utils-add-LXC_PROC_PID_FD_LEN.patch - 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch - 0001-Backport-autodev-fix-from-lxc-master.patch - 0001-PyOS_AfterFork-python3.7.patch - Add a warning if lxc-user-nic is not setuid after set_permissions, to ensure users actually read the warning (which means we get to remove README.SUSE). It also supports people using paranoid mode, which is why it's done in post-install and isn't packaged. boo#988348 - Quite a lot of the runtime helpers and configuration have been moved to liblxc, in order to allow LXD to make use of them (because, in truth, they were always a requirement of liblxc and not just the lxc-* tools). - Add workaround for pre-15 distros, where _sharedstatedir was inexplicably /usr/com, to use the correct directory of /var/lib.- Rework packaging to be a more modern openSUSE-style.- compilation fixed for Python 3.7 (PyOS_AfterFork() replaced with PyOS_AfterFork_Child()) added patch 0001-PyOS_AfterFork-python3.7.patch- fix for bsc#988348 (lxc: enable setuid bit on lxc-user-nic) - do not remove setuid bit for lxc-user-nic on releases with suse_version >=1550 - remove setuid stuff from README.SUSE on releases with suse_version >=1550- move bash completion file from /etc/bash_completion.d/lxc to /usr/share/bash-completion/completions/ to avoid warning- 0001-Backport-autodev-fix-from-lxc-master.patch: fix unprivileged lxc containers on kernel >= 4.18- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the next patch - 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information leak and possible open() side effects accessible to regular users via lxc-user-nic (bsc#988348, CVE-2018-6556)- Add upstream patch to fix container start up problems when AppArmor is enabled (boo#1099239) * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch- Make use of %license macro- update to version 2.0.9 Bugfixes: * apparmor: Allow containers to start in AppArmor namespaces * apparmor: Drop useless apparmor denies * caps: Move ifndef/define to the top * cgfsng: Fail when limits fail to apply * cgfsng: Log when we defer to cgfsng * cgfsng: Only output debug info when we set cgroup data * cgroups: Handle hybrid cgroup layouts * cgroups: Use tight scoping * cgroups: Workaround gcc-7 bug * commands: Abstract cmd socket handling + logging * commands: Add missing translation * commands: Delete meaningless comments * commands: Handle EINTR * commands: Make state server interface flexible * commands: Move lxc_make_abstract_socket_name() * commands: Rename to lxc_cmd_add_state_client() * commonds: Fix typo * conf: Adapt to lxc-user-nic usage * conf: Add lxc_get_idmaps() * conf: Add userns_exec_full() * conf: Allow to clear all config items * conf: Allow to get lxc.autodev * conf: Allow to get lxc.haltsignal * conf: Allow to get lxc.kmsg * conf: Allow to get lxc.rebootsignal * conf: Allow to get lxc.stopsignal * conf: Allow writing uid mappings with euid != 0 * conf: Avoid double-frees in userns_exec_1() * conf: Clear lxc.include * conf: Do not check for empty value twice * conf: Do not check union on wrong net type * conf: Do not deref null pointer * conf: Do not free static memory * conf: Do not log uninitialized memory * conf: Do not write out trailing spaces * conf: Don't send ttys when none are configured * conf: Dump lxc_get_config_item() * conf: Error out on too many mappings * conf: Fix bionic builds * conf: Fix build without libcap * conf: Fix tty creation * conf: Fix userns_exec_1() * conf: Free netdev->downscript * conf: Implement config item clear callback * conf: Improve lxc_map_ids() * conf: Improve tty shifting function * conf: Improve write_id_mapping() * conf: Increase lxc-user-nic buffer * conf: Log lxc-user-nic output * conf: lxc_listconfigs -> lxc_list_config_items * conf: Move clearing config items into one place * conf: Non-functional changes * conf: NOTICE() on mounts on container's /dev * conf: Performance tweaks * conf: Preserve newlines * conf: Properly parse lxc.idmap entries * conf: Record idmap that gets written * conf: Refactoring of most config parsing code * conf: Refactor network deletion * conf: Remove dead assignments in parse_idmaps() * conf: Remove dead mount code * conf: Rework lxc_map_ids() * conf: Rework userns_exec_1() * conf: Send ttys in batches of 2 * conf: Switch API to new callback system * conf: Use a minimal {g,u}id map * conf: Use correct check on char array * conf: Use run_command for lxc-usernsexec * console: Clean tty state + return 0 on peer exit * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty * console: Fix memory leak of 'lxc_tty_state' * console: Remove dead assignments * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY * core: Fix a format string build failure on x32 * core: Fix includes for Android * core: Fix memory and resource leak * core: Fix some cppcheck warnings * core: Fix the bug of 'ts->stdoutfd' did not fill with parameters 'stdoutfd' * core: Include custom mntent for Android * core: Log function called in userns_exec_1() * core: Remove the __func__ macro * core: Remove the unused macro * core: Replace "priority" with "level" * core: Revert "Add a prefix to the lxc.pc" * core: root -> am_root * core: struct bdev -> struct lxc_storage * core: Update .gitignore * core: Use strerror(errno) instead of %m * criu: Add cmp_version() * criu: Use correct check initialization check * doc: Add CII Best Practices badge to README * doc: Add console behavior to Japanese lxc.container.conf(5) * doc: Document missing env variables * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1) * doc: Fix regex-typo in lxc-monitor.sgml.in * doc: Reword id mapping restrictions when unpriv * doc: Rework README * doc: Tweak Japanese lxc.container.conf(5) * doc: Tweak lxc.container.conf a little * doc: Untabify Japanese lxc.container.conf(5) * doc: Update API documentation for get_config_item * execute: Enable console & standard /dev symlinks * init: Add comment for exclude 32 and 33 signals * init: Adjust include statements * init: Become session leader * init: Move initialization of act to outside of the loop * init: Report exec*() failure * init: Use lxc-stop to stop systemd service * liblxc: Make sure memory is free()ed * liblxc: Only spawn monitord on demand * liblxc: Remove 5s timeout on error * liblxc: Use snprintf() * liblxc: Use userns_exec_full() * lock: Non-functional changes * lock: Return the right error when open lock file failed * log: Prevent stack smashing * log: Switch to a new lxc_log_init function * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix * monitor: Add lxc_cmd_state_server() * monitor: Add TRACE()ers * monitor: Delete unneccessory include file * monitor: Remove dead assignments * monitor: Remove the workaround-code for lxc_abstract_unix_connect * monitor: Remove unlink operation for af_unix * network: Add arg to config clear method * network: Add data arg to set callback * network: Add ifindex field for host veth device * network: Add lxc_log_configured_netdevs() * network: Add missing checks for empty links * network: Add network counter * network: Add warning when ignoring MTU * network: Clear ifindeces * network: Delete ovs for unprivileged networks * network: Document all fields in struct lxc_netdev * network: Don't delete net devs we didn't create * network: Fix grammar * network: Implement lxc_get_netdev_by_idx() * network: Log cleanup thread pid for openswitch * network: Log ifindex * network: Log ifindex for host side veth device * network: Log veth_attr.pair and veth_attr.veth1 * network: Move config_value_empty() to confile_utils * network: Perform network validation at creation time * network: Remove allocation from lxc_mkifname() * network: Remove dead assignments * network: Remove netpipe * network: Retrieve correct names and ifindices * network: Retrieve the host's veth device ifindex * network: Rework network creation * network: Send ifindex for unpriv networks * network: Stop recording saved physical net devices * network: Use correct network device name * network: Use send()/recv() * network: Use single helper to delete networks * network: Use static memory for net device names * openvswitch: Delete ports intelligently * seccomp: Export the seccomp filter after load it into kernel successful * seccomp: Print action name in log * seccomp: s/n-new-privs/no-new-privs/g * seccomp: Update comment for function parse_config * start: Add lxc_free_handler() * start: Add lxc_init_handler() * start: Document all handler fields * start: Don't call lxc_map_ids() without id map * start: Don't close inherited namespace fds * start: Don't let data_sock users close the fd * start: Dup std{in,out,err} to pty slave * start: Ensure cgroups are cleaned up * start: Generalize lxc_check_inherited() * start: Log sending and receiving of tty fds * start: lxc_setup() after unshare(CLONE_NEWCGROUP) * start: Move env setup before container setup * start: Pass LXC_LOG_LEVEL to hooks * start: Pin rootfs when privileged * start: Remove dead variable * start: Send state to legacy lxc-monitord state server even if no state clients registered * start: Set environment variables correctly * start: Switch from SOCK_DGRAM to SOCK_STREAM * start: Switch ids at last possible instance * start: Use separate socket on daemonized start * start: Use userns_exec_full() * state: Remove lxc_rmstate declaration * storage: Add storage_utils.{c.h} * storage: Avoid segfault * storage: Default to orig type on identical paths * storage: Record output from mkfs.* * storage: Rename files "bdev" -> "storage" * storage: Use userns_exec_full() * storage/dir: Using 'add-required_remount_flags' function to add required flags * storage/loop: Detect loop file * storage/overlayfs: Fix wrong path * storage/overlay: Handle overlay for stable 2.0 * template: Remove obsolete bind-mounts from userns.conf * template: Use "rsync -SHaAX" to copy the cached rootfs into place * template/alpine: Add support for ppc64le * template/alpine: Change file check to also check file size (-f => -s) * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8" * template/centos: Add cronie to the pkg list * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64 * template/debian: Add aarch64 -> arm64 mapping * template/debian: Add buster as a valid release * template/debian: Don't force getty@ configuration * template/debian: Use deb.debian.org as the default Debian mirror * template/download: Fix syntax error * template/download: Sanitize script with shellcheck * template/opensuse: Add Tumbleweed as supported release * template/opensuse: Fix tumbleweed software selection * template/opensuse: getty.target.wants does not always exists * template/opensuse: Support leap 42.3 * template/opensuse: Tumbleweed has no update repo * template/plamo: Delete unnecessary process during container shutdown * template/ubuntu: Check that there is netplan binary, rather than just just a config directory * template/ubuntu: Conditionally move upstart ssh job, as it is now optional * template/ubuntu: Support netplan in newer releases by default * tests: Adapt lxc-user-nic tests to new syntax * tests: Add corner-case tests for lxc_safe_{u}int() * tests: Add item clear and config file tests * tests: Add test script to test the ro option of lxc.rootfs.options * tests: Add unit tests for idmap parser * tests: Avoid NULL pointer dereference * tests: Compare return value to expected value whenever we can * tests: Define a network before checks * tests: Don't fail when no processes for the user exist * tests: Enforce all methods for config items * tests: Remove dead assignments * tests: Remove the temp container directory * tests: Shortlived daemonized containers * tests: Support systemd hybrid cgroups * tools: Add additional cgroup checks * tools: Print "-devel" when LXC_DEVEL is true * tools: Use "which" * tools/lxc-attach: Allow for situations without /dev/tty * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT * tools/lxc-checkconfig: Add probe status checking * tools/lxc-execute: Print error message when failed * tools/lxc-ls: Return all containers by default * tools/lxc-monitord: Exit when receiving a quit command * tools/lxc-unshare: Do not pass NULL pointer * tools/lxc-user-nic: Add new {create,delete} subcommands * tools/lxc-user-nic: Check db before trying to delete * tools/lxc-user-nic: Fix adding database entries * tools/lxc-user-nic: Fix memleak * tools/lxc-user-nic: Free memory and check for error * tools/lxc-user-nic: Initialize vars to silence gcc-7 * tools/lxc-user-nic: Keep lines from other {users,links} * tools/lxc-user-nic: Remove delta between master + stable * tools/lxc-user-nic: Remove double initialization * tools/lxc-user-nic: Rework renaming net devices * tools/lxc-user-nic: Simplify logic * tools/lxc-user-nic: Test privilege over netns on delete * tools/lxc-usernsexec: Remove dead assignments * travis: Fix builds * utils: Add has_fs_type() + is_fs_type() * utils: Add lxc_nic_exists() * utils: Add lxc_safe_ulong() * utils: Add run_command * utils: Close parent end in child process after fork * utils: Do not write to 0 sized buffer * utils: Duplicate stderr as well in lxc_popen() * utils: Fix lxc_mount_proc_if_needed() * utils: Fix lxc_popen()/lxc_pclose() * utils: Fix mem leak with realpath * utils: Fix num parsing functions * utils: Fix ppc64le builds * utils: Fix the way to detect blocking signal * utils: lxc_popen() remove dead assignments * utils: Move helpers from cgfsng.c to utils.{c,h} * utils: Rework lxc_deslashify() * utils: Switch to has_fs_type() * utils: Use 1LU otherwise we overflow * utils: Use access instead of stat- removed ldconfig from lxc %post section- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin instead of /usr/sbin but it's best to depend on the actual package instead since the location might change in the future.- removed apparmor-rpm-macros again, as it is not needed for the current %post solution- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360- added correct reload of apparmor to %post- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...- Update to version 2.0.8 * Security fix for CVE-2017-5985 * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users. * This may affect some automated environments that were relying on our default (very much insecure) users. Bugfixes: Make lxc-start-ephemeral Python 3.2-compatible Fix typo Allow build without sys/capability.h lxc-opensuse: fix default value for release code util: always malloc for setproctitle util: update setproctitle comments confile: clear lxc.network..ipv{4,6} when empty lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals Make lxc-net return non-zero on failure seccomp: allow x32 guests on amd64 hosts. Add HAVE_LIBCAP c/r: only supply --ext-mount-map for bind mounts Added 'mkdir -p' functionality in create_or_remove_cgroup Use LXC_ROOTFS_MOUNT in clonehostname hook squeeze is not a supported release anymore, drop the key start: dumb down SIGCHLD from WARN() to NOTICE() log: fix lxc_unix_epoch_to_utc() cgfsng: make trim() safer seccomp: set SCMP_FLTATR_ATL_TSKIP if available lxc-user-nic: re-order #includes lxc-user-nic: improve + bugfix lxc-user-nic: delete link on failure conf: only try to delete veth when privileged Fix lxc-containers to support multiple bridges Fix mixed tab/spaces in previous patch lxc-alpine: use dl-cdn.a.o as default mirror instead of random one lxc-checkconfig: verify new[ug]idmap are setuid-root [templates] archlinux: resolve conflicting files [templates] archlinux: noneed default_timezone variable python3: Deal with potential NULL char* lxc-download.in / allow setting keyserver from env lxc-download.in / Document keyserver change in help Change variable check to match existing style tree-wide: include directly conf/ile: make sure buffer is large enough tree-wide: include directly tests: Support running on IPv6 networks tests: Kill containers (don't wait for shutdown) Fix opening wrong file in suggest_default_idmap do not set the root password in the debian template do not set insecure passwords don't set a default password for altlinux, gentoo, openmandriva and pld tools: exit with return code of lxc_execute() Keep veth.pair.name on network shutdown Makefile: fix static clang init.lxc build Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE Increased buffer length in print_stats() avoid assigning to a variable which is not POSIX shell proof (bug #1498) remove obsolete note about api stability conf: less error prone pointer access conf: lxc_map_ids() non-functional changes caps: add lxc_{proc,file}_cap_is_set() conf: check for {filecaps,setuid} on new{g,u}idmap conf: improve log when mounting rootfs ls: simplify the judgment condition when list active containers fix typo introduced in #1509 attach|unshare: fix the wrong comment caps: skip file capability checks on android autotools: check for cap_get_file caps: return false if caps are not supported conf: non-functional changes to setup_pts() conf: use bind-mount for /dev/ptmx conf: non-functional changes utils: use loop device helpers from LXD create ISSUE_TEMPLATE.md cgroups: improve cgfsng debugging issue template: fix typo conf: close fd in lxc_setup_devpts() conf: non-functional changes utils: tweak lxc_mount_proc_if_needed() Change sshd template to work with Ubuntu 17.04 conf: order mount options conf: add MS_LAZYTIME to mount options monitor: report errno on exec() error af unix: allow for maximum socket name commands: avoid NULL pointer dereference commands: non-functional changes lxccontainer: avoid NULL pointer dereference monitor: simplify abstract socket logic precise is not the latest LTS, let's use xenial instead fix the wrong exit status conf: non-functional changes lxc_fill_autodev() conf: remove /dev/console from lxc_fill_autodev() conf: non-functional changes lxc_setup() conf: non-functional changes to console functions conf: improve lxc_setup_dev_console() conf: lxc_setup_ttydir_console() config: remove /dev/console bind mount doc: document console behavior utils: add lxc_unstack_mountpoint() conf: unstack all mounts atop /dev/console console: fail when we cannot allocate peer tty start: remove umount2() conf: non-functional changes utils: handle > 2^31 in lxc_unstack_mountpoint() Install systemd units for CentOS Merge ubuntu and debiancase start: add crucial details about lxc_spawn() - Deleted patches that have been backported before: - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch - 0001-tree-wide-include-sys-sysmacros.h-directly.patch - 0002-tree-wide-include-sys-sysmacros.h-directly.patch - added signature verification- Replace %__cp by cp- fix for boo#1028264 added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch- backported two patches to get the package to build again for Tumbleweed (applied only on tumbleweed aka suse_version >1315) 0001-tree-wide-include-sys-sysmacros.h-directly.patch 0002-tree-wide-include-sys-sysmacros.h-directly.patch- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/ 0001-bdev-use-correct-overlay-module-name.patch 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch 0005-tools-move-rcfile-to-the-common-options-list.patch 0006-tools-set-configfile-after-load_config.patch 0007-doc-add-rcfile-to-common-opts.patch 0008-doc-Update-Korean-lxc-attach-1.patch 0009-doc-Add-rcfile-to-Korean-common-opts.patch 0010-doc-Add-rcfile-to-Japanese-common-opts.patch 0011-tools-use-exit-EXIT_-everywhere.patch 0012-tools-unify-exit-calls-outside-of-main.patch 0013-utils-Add-mips-signalfd-syscall-numbers.patch 0014-seccomp-Implement-MIPS-seccomp-handling.patch 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch 0016-seccomp-fix-strerror.patch 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch 0018-seccomp-add-support-for-s390x.patch 0019-seccomp-remove-double-include-and-order-includes.patch 0020-seccomp-non-functional-changes.patch 0021-templates-use-fd-9-instead-of-200.patch 0022-templates-fedora-requires-openssl-binary.patch 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch 0025-c-r-Fix-pid_t-on-some-arches.patch 0026-templates-Add-mips-hostarch-detection-to-debian.patch 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch lxc-aa_allow_incomplete-default.patch 0001-attach-do-not-send-procfd-to-attached-process.patch- update to version 2.0.7 This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are: - attach: Close lsm label file descriptor - attach: Non-functional changes - attach: Simplify lsm_openat() - caps: Add lxc_cap_is_set() - conf: attach: Save errno across call to close - conf: Clearly report to either use drop or keep - conf: criu: Add make_anonymous_mount_file() - conf: Fix suggest_default_idmap() - configure: Add --enable-gnutls option - configure: Check for memfd_create() - configure: Check whether gettid() is declared - configure: Do not allow variable length arrays - configure: Remove -Werror=vla - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev() - conf: Non-functional changes - conf: Remove thread-unsafe strsignal + improve log - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers - log: Add lxc_unix_epoch_to_utc() - log: Annotate lxc_unix_epoch_to_utc() - log: Drop all timezone conversion functions - log: Make sure that date is correctly formatted - log: Use lxc_unix_epoch_to_utc() - log: Use N/A if getpid() != gettid() when threaded - log: Use thread-safe localtime_r() - lvm: Supress warnings about leaked files - lxccontainer: Log failure to send sig to init pid - monitor: Add more logging - monitor: Close mainloop on exit if we opened it - monitor: Improve log + set log level to DEBUG - monitor: Log which pipe fd is currently used - monitor: Make lxc-monitord async signal safe - monitor: Non-functional changes - python3-lxc: Fix api_test.py on s390x - start: Check for CAP_SETGID before setgroups() - start: Fix execute and improve setgroups() calls - state: Use async signal safe fun in lxc_wait() - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host - templates: lxc-debian: Fix getty service startup - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option - templates: lxc-debian: Handle ppc hostarch -> powerpc - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2 - templates: lxc-opensuse: Remove libgcc_s1 - templates: lxc-opensuse: Remove poweroff.target -> sigpwr.target copy - templates: lxc-opensuse: Set to be unconfined by AppArmor - templates: lxc-opensuse: Update for Leap 42.2 - tests; Don't cause test failures on cleanup errors - tests: Skip unpriv tests on broken overlay module - tools: Improve logging - tools: lxc-start: Remove c->is_defined(c) check - tools: lxc-start: Set configfile after load_config - tools: Only check for O_RDONLY - tree-wide: Random macro cleanups - tree-wide: Remove any variable length arrays - tree-wide: Sic semper assertis! - utils: Add macro __LXC_NUMSTRLEN - utils: Add uid, gid, group convenience wrappers - commented out the patches, as they no longer apply cleanly- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933). 0001-attach-do-not-send-procfd-to-attached-process.patch- setcap has been moved to /usr/sbin (boo#998326).- update lxc to 2.0.4 - add 0001-bdev-use-correct-overlay-module-name.patch - add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch - add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch - add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch - add 0005-tools-move-rcfile-to-the-common-options-list.patch - add 0006-tools-set-configfile-after-load_config.patch - add 0007-doc-add-rcfile-to-common-opts.patch - add 0008-doc-Update-Korean-lxc-attach-1.patch - add 0009-doc-Add-rcfile-to-Korean-common-opts.patch - add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch - add 0011-tools-use-exit-EXIT_-everywhere.patch - add 0012-tools-unify-exit-calls-outside-of-main.patch - add 0013-utils-Add-mips-signalfd-syscall-numbers.patch - add 0014-seccomp-Implement-MIPS-seccomp-handling.patch - add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch - add 0016-seccomp-fix-strerror.patch - add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch - add 0018-seccomp-add-support-for-s390x.patch - add 0019-seccomp-remove-double-include-and-order-includes.patch - add 0020-seccomp-non-functional-changes.patch - add 0021-templates-use-fd-9-instead-of-200.patch - add 0022-templates-fedora-requires-openssl-binary.patch - add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch - add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch - add 0025-c-r-Fix-pid_t-on-some-arches.patch - add 0026-templates-Add-mips-hostarch-detection-to-debian.patch - add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch- Abolish old macro use. Remove ancient %clean section. Avoid sh invocation for simple ldconfig calls.- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide container aware /proc files. The /sys/fs/cgroup part is slowly phased out because we now have cgroup namespaces.- Split into packages to follow best practice. * lxc * liblxc1 * liblxc-devel Also, we need liblxc1 to be separately installable from LXC for LXD. - Tweak descriptions.- Update to 2.0.3 (changes since 2.0.1): * apparmor: Refresh generated file * apparmor: add make-rslave to usr.bin.lxc-start * apparmor: Allow bind-mounts and {r}shared/{r}private * apparmor: allow mount move * apparmor: Update mount states handling * core: Drop lxc-devsetup as unneeded by current autodev * core: Fix redefinition of struct in6_addr * core: Include all lxcmntent.h function declarations on Bionic * c/r: c/r: use criu's "full" mode for cgroups * systemd: start containers in foreground when using the lxc@.service * templates: debian: Make sure init is installed * templates: oracle: Fix console login * templates: plamo: Fix various issues * templates: ubuntu: Install apt-transport-https by default * travis: ensure 'make install' doesn't fail * travis: test VPATH builds * upstart: Force lxc-instance to behave like a good Upstart client- Update to 2.0.1: Lots of fixes and enhancements. https://linuxcontainers.org/lxc/news/#lxc-201-release-announcement-16th-of-may-2016 - Add criu to recommends for C/R support - Add a workaround for lxc-start failure without apparmor: lxc-aa_allow_incomplete-default.patch - Drop obsoleted patch: lxc-1.0.7-fix-bashisms.patch- Update to 1.1.5- Remove attach-mount-a-sane-prox-for-LSM-setup.patch- Update to 1.1.4 * Remove CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch * Remove CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch * Remove CVE-2015-1335-Protecti-container-mounts-against-symlinks.patch * Remove templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch Now integrated into the current version- Added CVE-2015-1335-Protecti-container-mounts-against-symlinks.patch (bsc#946744)- Added templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch- Added CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch (bnc#938522) - Added attach-mount-a-sane-prox-for-LSM-setup.patch (bnc#938523) - Added CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch (bnc#938523)- update to 1.1.2 - Removed 0001-added-upstream-action-fallback-create-directory-loca.patch - Removed 0003-lxc-opensuse-template-now-understands-release-argume.patch - Removed 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch - Removed 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch - Removed 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch - Removed 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch- fix bashisms in lxc-autostart-helper script - add patches: + lxc-1.0.7-fix-bashisms.patch- Improved error message- Disabling builds on 13.2/Tumbleweed only, if build version before 20141120 Patch 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch- lxc-opensuse default release changed to 13.1, as 12.3 reaches end-of-life soon Patch 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch- patch 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch has been sent upstream and is included in version 1.0.7- update to version 1.0.7 Core: Include network prefix when ipv4/ipv6 keys are queried apparmor: silence 'silent' mount denials add file/func/line to debug info apparmor: restrict signal and ptrace for processes cgmanager: several fixes lxc: don't call pivot_root if / is on a ramfs fix lxc.mount.auto clearing conf.c: Define MS_PRIVATE for Android network: convert param ifname to const. network: check result of if_nametoindex(). network: allow lxc_network_move_by_index() rename netdev in moving. network: introduce a interface named lxc_netdev_isup(). lxccontainer.c: rename enter_to_ns to enter_net_ns lxc_global_config_value can return the default lxc.cgroup.pattern whether root or non-root do_rootfs_setup: fix return bugs lxc-start: don't re-try to mount rootfs if we already did so attach: don't use confstr(_CS_PATH) lxc_global_config_value: simplify the theme Fixed mismatch on ipvX gateway attach: don't ignore sigint/sigkill if stdin is redirected cgmanager: fix 'attach' with "all" controller support lxc/utils: bugfix freed pointer return value conf.c: change 'instanciate' to 'instantiate' fix wrong nlmsg_len Remounts bind mounts if read-only flag is provided Allow lxc_clear_config_item to clear idmaps. overlay and aufs clone_paths: be more robust overlayfs: overlayfs.v22 or higher needs workdir option Fix clone issues Improve veth error cases logging fixed typo in comment audit: added capacity and reserve() to nlmsg rmdir and lxc_unpriv returns non-negative error codes typofixes - https://github.com/vlajos/misspell_fixer Bindings: add src/python-lxc/setup.py into .gitignore Tests: tests: Fix unpriv test lxc-test-unpriv: don't clear out /etc/lxc/lxc-usernet lxc-test-unpriv: test for different cgroups per subsystem tests: try again when waitpid() sets errno as EINTR Commands: lxc_start: ERROR if container is already running. lxc-start: return 0 rather than error if container is already running Make legacy lxc-ls more robust lxc_info: flush stdout before calling routines which may fork Templates: Fix typo in lxc-gentoo template busybox template: support for unprivileged containers busybox template: mount fstab when available Fix another gentoo template typo Create the apt proxy in the cache instead of the 1st container lxc-plamo: mount tmpfs on /dev/shm lxc-cirros: support creating+running unprivileged Fix lxc-openmandriva.in typo. Fix lxc-centos.in typo. lxc-opensuse: Disable on 13.2 lxc-alpine: make sure /dev/shm is world writeable lxc-alpine: create a default tty for console lxc-debian: added support for package installation lxc-debian: Fix default mirrors lxc-debian: support systemd as PID 1 lxc-debian: adjust init system configurations lxc-debian: mask both Wheezy and Jessie udev services lxc-opensuse: Disabling builds on openSUSE Tumbleweed, detection improved. Documentation: Fix the lxc manpage a bit lxc-create -t option is not optional doc: Update kernel and cgroup info in Japanese lxc(7) tabs/spaces consistency- changed patch 0002 to work on newer Tumbleweed snapshots, where os-release does not contain 'Harlequin' anymore- backported the patches from upstream, so that the opensuse template now accepts releases as arguments, and it is possible to install 12.3, 13.1 or 13.2 * 0003-lxc-opensuse-template-now-understands-release-argume.patch * 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch * 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch- Added 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch Disable building opensuse containers on openSUSE 13.2 due to changed build behaviour (bsc#905638)- added 0001-added-upstream-action-fallback-create-directory-loca.patch * adds action fallback available upstream * creates directory /run/lock/subsys/ if not available - deleted 0001-systemd-Ensure-action-is-defined.patch- update to 1.0.6, which includes the following changes/fixes: rootfs_is_blockdev: don't run if no rootfs is specified confile: sanity-check netdev->type before setting netdev->priv elements Fix typo in previous patch Remove mention of mountcgroups in ubuntu.common config remove mountcgroup hook entirely Add SIGPWR support to lxc_init Sysvinit script fixes unprivileged containers: use next available nic name if unspecified fix typo in btrfs error msg apparmor: Allow slave bind mounts provide an example SELinux policy for older releases print a helpful message if creating unpriv container with no idmap use non-thread-safe getpwuid and getpwgid for android btrfs: support recursive subvolume deletion (v2) fix '--log-priority' --> '--logpriority' in main Fix a file descriptor leak in the daemonization Fix a file descriptor leak in the monitord spawn Ensure /dev/pts directory exists on pts setup Do not allow snapshots of LVM backed containers add lxc.console.logpath coverity: don't use newname after null check coverity: malloc the right size for btrs_node tree introduce --with-distro=raspbian cgmanager get/set: clean up child (v2) Add extra debugging Fix typo in the previous commit... do_mount_entry: add nexec, nosuid, nodev, rdonly flags if needed at remount command socket: use hash if needed monitor: fix sockname calculation for long lxcpaths show additional info if btrfs subvolume deletion fails (issue #315) ignore SIGKILL (CTRL-C) and SIGQUIT (CTRL-\) - issue #313 chmod container dir to 0770 (v2) build: Fix support for split build and source dirs mount_entry: use statvfs lxc_mount_auto_mounts: honor existing nodev etc at remounts statvfs: do nothing if statvfs does not exist (android/bionic) Prevent compiler warning by initializing ifindex build: don't remove configuration template on clean build: Make setup.py run from srcdir to avoid distutils errors handle hashed command socket names (v2) lxc-cgm: fix issue with nested chowning Report container exit status to monitord support use of 'all' containers when cgmanager supports it log: fix quiet mode Fix build error(ISO C90 specs violation) in lxc.c lxc_map_ids: don't do bogus chekc for newgidmap lxc_map_ids: add a comment clean autodev dir on container exit As discussed on ML, do not clean autodev dir on reboot Fix build failure due to slightly different rmdir Fix presentation of IPv6 addresses and gateway lxc-start: Add -F (foreground) option all: Discontinue the use of in-line comments (stable) all: Include hostname in DHCP requests all: Switch from arch command to uname -m altlinux: bugfixes archlinux: Properly set default locale in /etc/locale.conf centos template: prevent mingetty from calling vhangup(2) download: Have wget retry 3 times download: Make --keyserver actually work gentoo: keep original uid/gid of files/dirs when installing gentoo: Use portageq to determine portage distdir plamo: keep original uid/gid of files/dirs when installing plamo: bugfix template ssh: send hostname to dhcp server ubuntu: don't check for $rootfs/run/shm ubuntu: add help string lxc-test-{unpriv,usernic.in}: make sure to chgrp as well lxc-test-unpriv: test lxc-clone -s tests: Call sync before testing a shutdown tests: Copy the download cache when available [v2] Fix the unprivileged tests cgroup management doc: Mention that veth.pair is ignored for unpriv doc: Add mention that veth.pair is ignored for unpriv in Japanese man doc: Add -F option to Japanese lxc-start(1) doc: Update the description of SELinux in Japanese lxc.container.conf(5) doc: Add 'zfs' to the parameter of -B option in lxc-create(1) doc: add lxc.console.logpath to Japanese lxc.container.conf(5) doc: language correction doc: Fix Japanese translation of lxc.container.conf(5) doc: Add destroy option to lxc-snapshot(1) doc: Add description about ignoring lxc.cgroup.use when using cgmanager - delete: 0002-lxc-autostart-helper-working-even-if-action-is-not-a.patch - delete: 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch- third patch to get lxc-autostart-helper to work on openSUSE * 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch- added another patch to ensure correct operation of lxc.service systemd-unit * 0002-lxc-autostart-helper-working-even-if-action-is-not-a.patch- added patch to ensure correct operation of lxc.service systemd-unit * 0001-systemd-Ensure-action-is-defined.patch- update to 1.0.5 * seccomp profile * core: Fix unprivileged containers to work with recent kernels. * core: Fix building with -Werror=maybe-uninitialized. * core: seccomp: Don't fail on unresolvable syscalls. * core: lxc-init: Don't force dropping capabilities. * core: configure: Split -lcap and -lselinux out of LIBS. * core: configure: Fix expansion of libexecdir. * core: seccomp: Support 'all' arch sections. * core: seccomp: Fix 32-bit rules. * core: seccomp: Enable a default filter for all templates. * core: Fix corruption in write_config. * core: attach: Fix querying for the current personality. * core: cgmanager: Have cgm_set and cgm_get use absolute paths when possible. * core: cgmanager: Make sure @value is null-terminated in cgm_get. * core: optimization of signal filtering/parsing code. * core: apparmor: Allow hugetlbfs by default (similar to tmpfs and restricted by the hugetlb cgroup controller). * core: Fix find_fstype_cb to ignore blank lines and comments. * lxc-autostart: Actually respect -P when passed. * lxc-attach: Fix typo in usage. * lxc-start: propagate the container exit code. * lxc-stop: Fix incorrect timeout handling. * lxc-device: Support --version. * lxc-ls: Support --version. * lxc-start-ephemeral: Support --version. * tests: Avoid the download template when possible. * tests: Don't fail when HOME isn't defined. * tests: apparmor: Always end messages with a newline. * tests: Clarify error message and fix return codes. * tests: lxc-test-ubuntu doesn't actually need bind9-host. * lxc-debian: standardize formatting. * lxc-debian: fix formatting. * python3: Fix attach_wait and threads.- fixed the build errors- update to 1.0.4; disable lua and excluded lxc-top, as lua-dependencies are not available- added --enable-lua to compile lxc with lua support (for lxc-top)- added "Requires: lua", as lxc-top needs it- added file /usr/sbin/rxlcx that links to /usr/sbin/service- upgrade to version 1.0.3 - deleted patch patch_bash_completion.d_lxc.patch, as it is included upstream already - added file /usr/sbin/init.lxc- patch now including headers and signoff- updated sources to 1.0.0 - added dirs and files in /etc/apparmor.d/ and /etc/bash_completion.d/ to spec file - autogenned.patch: removed - added patch patch_bash_completion.d_lxc.patch, to remove shebang from bash_completion-file - The patch patch_bash_completion.d_lxc.patch has been sent upstream additionally- update to lxc-1.0 beta * we use a later snapshot than beta1 - drop support for older distros than 12.3 (it does not build there) - config_ipv6-run-inet_pton-on-the-addr-value-without-.patch: Removed - configure-find-seccomp-using-pkg-config.patch: Removed - configure-support-suse-s-docbook-to-man.patch: Removed - lxc-opensuse-add-perl-base-to-prerequisities.patch: Removed - opensuse-systemd-shutdown.patch: Removed- config_ipv6-run-inet_pton-on-the-addr-value-without-.patch: config_ipv6: run inet_pton on the addr value without mask (bnc#851760)- lxc-opensuse-add-perl-base-to-prerequisities.patch: lxc-opensuse: add perl-base to prerequisities (bnc#839873)- opensuse-systemd-shutdown.patch: Fixed opensuse template to workaround lxc-shutdown problem with systemd (bnc#839388)- update to 0.9.0 * configure-support-suse-s-docbook-to-man.patch: added to support our docbook-to-man * configure-find-seccomp-using-pkg-config.patch: add support for our libsseccomp being under /usr/include/libseccomp... * autogenned.patch: the two above applied by autogen.sh to the sources * remove a ton of patches which are upstream now: 0001-Ensure-btrfs-subvolume-is-destroyed-on-error.patch lxc-autodev.patch lxc-cgroup-already-running.patch lxc-opensuse-12.2.patch lxc-opensuse-12.3.patch lxc-opensuse-clonefixes.patch lxc-opensuse-extend-base.patch lxc-opensuse-proper-failure.patch lxc-opensuse-tmpfs.patch pivot-root_shared.patch - Remove obsolete info from README.SUSE- Ensure update repository directory is correctly created (bnc#804435).- clean cache if a distro version in template does not match with files in a cache (bnc#804435#c19)- run zypper ar only if .repo file does not exists fixes a partial created repos (bnc#804435#c16)- Add lxc-opensuse-12.3.patch: update template to openSUSE 12.3- lxc-opensuse-extend-base.patch: lxc-opensuse: extend base (bnc#804232) - lxc-opensuse-proper-failure.patch: lxc-opensuse: proper failure - remove change-hwaddr-on-clone.patch as it was fixed upstream already- Update pivot-root_shared.patch with upstream patch to build with old version of kernel headers. - Check for /etc/init.d/boot.cgroup presence before starting it in %post.- Release 0.8.0: + add support for autodetection of gateway address + add support for LVM2 and btrfs snapshot in lxc-clone + add support for apparmor + support nested cgroups + lxc no longer depends on perl + add support for container hooks (pre-start, mount, start, stop, umount, post-stop) + templates are moved to /usr/share/lxc/templates - Remove Accurately-detect-whether-a-system-supports-clone_children.patch: merged upstream. - Add lxc-opensuse-clonefixes.patch: fix openSUSE template regarding cloning. - Add 0001-Ensure-btrfs-subvolume-is-destroyed-on-error.patch: fix btrfs subvolume when removing a container. - Add lxc-autodev.patch: fill /dev when starting container (needed for systemd). - Update lxc-opensuse-12.2.patch: switch to systemd in container.- Add lxc-opensuse-12.1-fixbuild.patch: fix openSUSE 12.1 container build. - Add lxc-opensuse-12.2.patch: + switch openSUSE template to 12.2 + install iputils in the default configuration + autoconfigure gateway if possible + detect if network is set to 0.0.0.0 and configure DHCP + bind mount /etc/resolv.conf in container - Add use-relative-paths-for-container.patch, fix-lxc-clone-mount-entries.patch and update sles template: use relative paths for container mount points, fixes lxc-clone dropping some lxc.mount entries (bnc#789387). - Add Requires(post) dependency on aaa_base (bnc#786970) for openSUSE < 12.3. - Add dhcpcd in default installation in openSUSE template (bnc#776169). - Add change-hwaddr-on-clone.patch: modify MAC address when cloning a container (git) - Add wait-until-container-is-stopped.patch: if destroying a running container, wait until it is stopped before destroying it. - Ensure lxc-createconfig uses opensuse template by default. - Ensure lxc-createconfig correctly detect cidr (bnc#773234). - Add pivot-root_shared.patch: fix pivot root when / is mounted as shared (default on 12.3 and later).- Add various fixes to opensuse template : + create /etc/hostname as symlink to /etc/HOSTNAME (lxc-clone fix) + fix inadequate space in lxc.mount config (lxc-clone fix) + disable network in container if not configured + configure network scripts properly - Add lxc-snapshot-btrfs-lvm.patch: backport snapshot support, using btrfs or lvm2. - Add lxc-opensuse-tmpfs.patch: ensure container shutting down is correctly detected by LXC.- Add lxc-createconfig script to easy LXC configuration (bnc#723950).- Accurately detect whether a system supports clone_children (bnc#750470)- Drop lxc-file_caps.patch, it is SLES specific, since openSUSE is now shipping with file capabilities enabled.- Update lxc-opensuse-12.1.patch to correctly generate containers on x86 (bnc#739315). - Backport some fixes from SLES 11 SP2: - Add lxc-checkconfig-kernel-3.patch and lxc-file_caps.patch: fix detection of kernel 3.x and file capabilities (bnc#720845). - Fix example path in manpages (bnc#723946).- Add console to opensuse securetty, since we are in a container.- Add lxc-opensuse-12.1.patch: create openSUSE 12.1 containers now - Add Recommends on build package, which is used by opensuse template. - Update README.SUSE to current status for cgroups mountpoint- Fix license tag, it is LGPLv2.1+ (using LGPLv2+ tag to be consistent).- Update to 0.7.5: - add initial lxc-clone feature - add arm as supported srcarch - opensuse template is merged - improve other distribution templates - support cgroups mounted in multiple places- kill _service- Add lxc-opensuse template. - package /var/lib/lxc.- update to 0.7.4.2 - exit if allocation fails - ensure monitored container name is null terminated - do not put devpts in fstab- update to 0.7.4.1 - fix mount path - rename physical device to the original name- update to 0.7.4 final - fix support for >= 2.6.37 kernels - update README.SUSE file -- it contained obsolete information- update to 0.7.4-rc1+ - fix cgroups collision with systemd (bnc#673821) - lxc-start output-to-file support - better error reporting - suppress udev log output - many fixes- update to 0.7.3 - mount the rootfs to the mount directory first - update the lxc.conf man page - fix compilation and link errors - don't play with the capabilities when we are root- update to 0.7.2- update to 0.7.1 * full list of changes since 0.6.5 at http://lxc.git.sourceforge.net- add README.SUSE - add %dir /var/lib/lxc- update to 0.6.5- remove stddef.h workaround, linux-kernel-headers are fixed now- remove mkdir /var/lxc from %post rpm script- Remove old lxc hack from specfile - Fix factory build due to broken linux-kernel-headers (add stddef.h to includes in configure.ac) and lxc automake file- Add Requires to ensure that lxc-setcap is working- update to 0.6.3 - add pkgconfig file to devel package- add linux-kernel-headers to build prereqs- update to 0.6.2: fixes creation scripts for several distros, adds logging, adds lxc-setcap- remove static libraries/bin/sh/bin/sh/bin/sh/bin/shs390zp2a 1556295650  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a3.1.0-bp150.5.10.13.1.0-bp150.5.10.13.1.0-bp150.5.10.1  usr.bin.lxc-startlxclxcdefault.conflxc-attachlxc-autostartlxc-cgrouplxc-checkconfiglxc-checkpointlxc-configlxc-consolelxc-copylxc-createlxc-createconfiglxc-destroylxc-devicelxc-executelxc-freezelxc-infolxc-lslxc-monitorlxc-snapshotlxc-startlxc-stoplxc-toplxc-unfreezelxc-unsharelxc-update-configlxc-usernsexeclxc-waitlxc-net.servicelxc.servicelxc@.serviceinit.lxcrclxcrclxc-netlxcFAQ.txtlxcconfigcommon.confcommon.conf.d30-openSUSE-apparmor.confREADMEcommon.seccompnesting.confoci.common.confuserns.confhooksclonehostnamedhclientdhclient-scriptmountecryptfsrootnvidiasquid-deb-proxy-clientubuntu-cloud-preplxc-patch.pylxc.functionsselinuxlxc.iflxc.tetemplateslxc-busyboxlxc-downloadlxc-locallxc-ocilxc-attach.1.gzlxc-autostart.1.gzlxc-cgroup.1.gzlxc-checkconfig.1.gzlxc-checkpoint.1.gzlxc-config.1.gzlxc-console.1.gzlxc-copy.1.gzlxc-create.1.gzlxc-destroy.1.gzlxc-device.1.gzlxc-execute.1.gzlxc-freeze.1.gzlxc-info.1.gzlxc-ls.1.gzlxc-monitor.1.gzlxc-snapshot.1.gzlxc-start.1.gzlxc-stop.1.gzlxc-top.1.gzlxc-unfreeze.1.gzlxc-unshare.1.gzlxc-update-config.1.gzlxc-user-nic.1.gzlxc-usernsexec.1.gzlxc-wait.1.gzlxc-usernet.5.gzlxc.conf.5.gzlxc.container.conf.5.gzlxc.system.conf.5.gzlxc.7.gz/etc/apparmor.d//etc/default//etc//etc/lxc//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/lxc//usr/share//usr/share/lxc//usr/share/lxc/config//usr/share/lxc/config/common.conf.d//usr/share/lxc/hooks//usr/share/lxc/selinux//usr/share/lxc/templates//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:10114/openSUSE_Backports_SLE-15_Update/efd5a6f401a8d15afee4a5168645bae7-lxc.openSUSE_Backports_SLE-15_Updatedrpmxz5s390x-suse-linux     !"#$%$%$%#%%$%%$$%#%%%%%%%%%%$%$$C source, ASCII textASCII textdirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=d14fdbe84ee63200b94233130953f8a973cf5b65, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=8b5825ec7d2207bbf82e4a2b29632f0fd503a011, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=faf6d657ebae8d2ced2969250cf05e45f2e69f64, not strippedPOSIX shell script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=53734599ccbcb00e18c4aceb8d63cf504bf5323e, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=9028c34db95c756c56ad5c1b3021d97e194261f9, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=531bedfdfbd83a11b90a68ada0e32f7d366ef1ae, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=ff6bf5420bd873b74a2a1e361b240e59951d9ffe, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=46f4a7a66bc13309f4260218f9618fbccb3e8cd0, not strippedBourne-Again shell script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=04affc01aedf5dd7ca4d209c63b62bde606cc46c, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=2efc7478c4ecd1b55e368f0f4af2d976aaf515d3, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=a685ad9b657171b5063945f895f555cf754c4028, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=350cf0f9b7878402f3e8247b2c86f1ad3dfaa9f9, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=c43ce2244973c6bb7609b83bc9067abd5d907def, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=42d05e750cf31e984864a6485e996053a26562ab, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=df603692f0ae0dbdd702bd377a1cb6098b85b6ff, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=dfde05c22cb4bdbf4abb9048b5812123f0365446, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=31f8c260a37f5097e68ba5b2b5d1ea32b5de53a2, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=e58f33cf68cff0ed53a941a3b7075e55bd7d221e, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=88621f9d79093e1ddb6d2c0d02678ff435fbe89a, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=2f415ddc5be4e8d0911c4b5a3959b8871f7d9ecb, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=b83602c08cd033f2fc202b6d1bab9376048a5450, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=e72c12972b09119aec10c0dbf48346d7f8a1f8ad, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=8cc9e54bb020a6f43649dfb990091908b83160a1, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=ffba26acdf5b73793b3f245134a83c57ba165a6a, not strippedPOSIX shell script, UTF-8 Unicode text executablePython script, ASCII text executableSE Linux policy interface sourceC++ source, ASCII textBourne-Again shell script, UTF-8 Unicode text executabletroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)!(08@AIQYair{    RRR R R RRRRR RR R RRRRR RR R RRRRRR R R RRRRRR RR RRRRRR R R RRRRR RR R RRRRR RR R RRRRRRR R R RRRRRR R R RRRRRR R R RRRRRR R R RRRRRR RR RRRRR RRR R RRRR RRR R RRRRRR RR R RRRRRRR R R RRRRRR R R RRRRR RR RRRRRR R R RRRRRR RR R RRRRRRRR RR RR R RR RRRRRRRR R R RRRRRRR R R RRRRRRRRRRRRRRFc95buildcriu2.0 utf-8367ff81ae516aa5f4296c83db256bee9bd5f0cbd1e9d5a165d44344c828aedd1?7zXZ !t/]"k%aͼ9)V^+Wl3* Дw^1oV2ΛOOY2C˪H^`1𧇷_؁(^S j[Ԑ}h]6 ~Q*QC|#_eHѦ)u6k%nvh'}}lGt^_4=6"c^&努vT};c9b̴m/rv \ŋkM?(aI'~2OԷlVL[˻r<@ߔu}%9*۴Ԃ#Q8Vw[p7na$#ц$?'\WC/KhÁ9ŜmM֏ i+.3X|oר`I'xI {U:V\im_eʨxn6}_FSPEkyab3>rzVoĐŊb߅B2a8k!IIs]<|ߵYĖ7 X>=w/JA cҷ'~Ű?m35fwm3w\ԉm :[B8 x吠kɲzd=*@jL)ߜMs [ "7K X$nSп7QӑȞ[ۢ4 {̷iWփyp >c,Z)LX]0:ϻAi7sUޚ`^k3 ? v(#)PB2p<6uڱhUAoyEl'ř5}3+j>>+]Rp+9I+!L&CBHO*pB Ֆ= QJb0b]*l+6ggeMnnONj%GKiyYp" bbxE~?ˋ0,8c<|ztu{48=VyKyF,@33Fҟ=8bim~Q1-$ȯ Na!lbV'3& DP"=$}@V{rQ\W3qܑ%_ķ(4>Wz<& 7f7!?W {^[@-ϝI`h^OĜ!K:\N[7+a Uxpt8˦lG$񿝮F N**ѥpFPzmdr۸ Iv 4?D XoS9%9Քn|8$/#^H&^?^4gi jSR-7r%H\Hla8>ǒBF#2ϟHώWO;\ )Naݰ9,/kzb=NH頋̌R^{/5Jʐb*[Um.ք!.i?n!?ڏlLmj{,N}jz}!pQk6tgQ\`,9G!v3f7-x`@CJoh9S`Y{]OTMTeJn3Eyhx7` uEbm#A`ws#ˢl/7] !<\ 1j"tܽ\W2OetUtؙ7əZe$K'vc>D W㨅ôG(s1 ~Jne2Gl]b E񇋿U^/R{;) LuzN_mvM_XS,a?@ Gd>i̎e+:>m%%,8Òe%?V1Zȡ(K?M)*0ld8#ezzu&_O/[~1CjVJtLe{e2紧L5ܾCVO4rTShtc.uF|u e==%)vprJ;5ʬDcwskD׏pq-$iM rߖlz9xT !4d-p1d!l9oC([iԷƼ㍹7IRm!K!Ey#~p%qN&ص 7骂+eоa&n#>{ @*_l!s<. D&ˤfG\tuGHG }ZFk[I&(kXz>L) T*`i!L}m! *FIK:}UFNay&3lrC ~W9rf?E}--g\zoً0zlE皮Se34Ζ b@ !v|yeIì/p?f2t59>s9+AUtKir:^;#Տ !r mrH-vyu1!&WdA2TYŒqw_jOqraE˲8} 0Py 1wN;.&yDͯ K:wL,T:Wj귯z{>ۇd !fw_ay ƎdЪS Cb:){-977˲hg#O?`2K]rrn$ŪU+'m>?S#w(v88s [c15*?.']Sm;, (L]!)7`9ʣxNQ̸Cip;J扝mZj$rT%zYo[z4P ) զKBT,ī_]O\ms$2SӜ[RW{P>9Y%j5}t fe8; )O2B3 bb,y0*? S:~uJj=v;4󊈻f,*I wR5]Gjws0^xtVƅ%2w R XBַ|'ֵy ?"MRi|n Øk|ZkwY)"qãk"in  Ob.t֝Dω"93~}MDH+r19$C_ʦws6x(7ľ藍feK?:)w=0͕IwX/ӑj|~,gU8/5Ie1!%ȢK#E:C`[qH cf[O(4ߗ@-webIbٙo1{ ,S#[aVQJ@IVI8j徍m$s _$hT>|~Aa;/yևu](pp+'O=@ض<|B|Sy6NY(d z|ԿL}Kdq;0,>.3ѩ@) .|6cJ6& ԢHҷc.ja CE/zpFha2: ~9={^8vv{ce"X^Ʊv/λ3ϱ!*:%r7\qXߎ{l'wQTUS;|syb;H`.}3*fƉkh¢&Q=Ȝ W4. &1Bag'&mu0e \G8Hu:9dQ]cRIv[ֲc 94: ` tۻiޑV&w\zȶ~T>u;2 u2\Pnr,ĜGL!xe)z!5o50dt&nԉVP%RˬÚx_YDN 8X~匰"j- Ӗɏ<i=TVhB(9̑Y@O A|wshg[V5V:WB2;y֙ѠyQa(jj峻ҭ iy|pm-͏9 ke_GRǣ%p4Vsl֓$d(J-W\%_QKGi^8ìWq^uvriκcͽM[hBtY5gTwZ/ LEi#"H,ԍ' 0rih^ fb8+H-eS+A0'꙽C%u9?5c (I0G{{Ч>(Ֆx\j 22jԑ#A#໿㻗е" Y盍"DV,| ^1 Fgkgńowr:E g҂FL8ОRo@YE\ Ņ,PT4HH P.mANe`/j_H>"'?t{`^u RDVgTh$қ)לҐ06{'{^VR%.M6]6;~;&7 k^#-d~3qU5Ɇ K%Ǟ sgNJq{UA%2얗DS kZHserJX}T̍:|? E'ZIha_x` vr8Ng2#Vaw ^6? ߠA'n?gJs_C,^!!8~*WxC^ݩC2q0$Fд\DNhc©-&TcbEmS5 /#Kr 2& V-׌δt|pÉ}R&Q{vu(_Oٝ.R7R 'tf3 M`/$P/ MQ{h_~>BnAN9XVդ[U X'w @$^m6ZD*ӰDt cE㡿`%amol/2\ڂe;%=Zp&9a/䑲* J-ނ.y,7cQۦ c\v#bڏK}"Hy[K4 Op4fjɨEu4EUVJ7i6MX*:qa<@ PYj;]lqv`zNWZ:{u; pVsn_ET'd >.mH#E :.x^eMpr+d X7 x:GVx0N(@4/]Ar?roso`i'B4xpp -w+щZbo)l:>[H/Wwoop ^HY,ծ?lWh] y0v]QB&GdleKۄ?[-&UGe3 ^]DWeLΚỹ`mؼl6VԓjX)B5f[`'Tu~:oo^n P:1tYp/HBk;N 7B!Jq]AaD䰧 }(/bC2]eU!鷱nVah:T?L6F(w}7wۃ Q_ Cft ְ|e^{f /s>vަ\\b&=?'\ӌ+wlֿK.T+^= h=|J{Sx. @RbKTlFf ^7\`F0^Ynn&.{[{ nl!ɩ+:NY)AlL%vqbi:pz#܀b $pQWE/\t Y 5j"b0L˵.ߦNR!ޭQ3W՞fJi;dPϭu 88X]Ğ_E/_S00uǝ;M }RB>끹ƛT2bfސ{ycL\1^rR<Jldz0/A;dŕw-$ MYW^L`~*lY5@%;ujPw9,XB /|9p2` }3Ya9bـJw+{WtB0QY9eW\Vu)_n›}n QPZ%m\ .7a#a-u;@e L7NӲVF,;1V~x.b/!cLޟX Ox^垚GH"W}"wL{ui?̳4ɯǁ| `QH)Ӓw8|%T-R[*R ׇηZI-XJFLOQl}С,7WR3z74Fi*dD_PLmYnJ,=r+/%" 1MkFU)TR#/,9h릔I*! 6kG숇V38+tQ4kUIׁȧ5+*818Gqc9 s >N47.Z7ʑB4xI#$ِ񗚮M=D$f{c? BAbKC Q+CՙGnk:Q&m/WW I>sN,uZ cLQ-/(S{QAQ|k,Oq&4+[*P>M:@m)(Zpe=@bs2*d}ClfI*Q +Gf-8,jO9]t8AksmOnחf}a?z"FrGQ/TˉeV]HӸqI] 3jrj%cS̝YTIˢ+^8[Vϕ!ȏ#@4izr&b D>*8+BwE OnP]0j!@<=W8%!m}ƵqS}W"J7d^p/5C "o]Y - >}I ͘t#{zޒ\U=u*͐סϸ@{eXs} ۼ'DETzJKNR&4ڃ*Sr,|34i#Yc xnQEkJelyG@z9fggQ DǗoJVo7E&bB={8*pW=;TB6dI`D&U{T*Ggߤxb>fm .b-MzP`1$ZZ_ncutKan.E\Jth\U~fZ;)hЄLJu`s~%I-B"XfIvP n*޲$4#G}_!D~1Ur6c}߫W!) h.&%{/ۦX 74~KOvFqzmK5G:~ RgB۴^̈́v<+;&wDu)t4Wȃ_?9:}ƽçGCљ}--I(%XR#Ĵ5t57a;7;8,ur`NQK?`Mɫz*U ~>#}"='SI-N(i2<V$w?'M׻ܹ;V\UjqAj:g5vaQR" ԐCawpz 3)nntKvluiFnogW@ff(π !֘:ҎΘwzBtZHF-'fE>%}ݿ`,J{t".¡v5Os[$QW(qSi_(o['3Lv&Xd.8m`o?#GqaYq6:Tqz\=`0a8jqqf&[EM164ͪ"܅BV(;CPD]/ecj"uf!{'Eo3fI&&8OLinNxjp2eL>FGB'XBZZG8}CeM G5!/P."^ iʗ *=}@ [2XS;R)ȲD>n#*o-/f% +/'(::d&rMHȍ-C]Ly` E L`( y!ゃqn4-YSRHbt?6k X_unQxDc;68S 4 ݦ2k52l `t~/~Ud9ZD簀6<6< ó?H B,*\qZfv侰wGakKd*p+"E0[9Ԧ5&Qx gP\Hꖯx ł )NeI}u"Y"ڋe>@006*!P̰ }4$wg\g|T]:Ln\8gK1F\EoZM7M?ytJVrqICPQC[tAwIm`0n?L[ċ.(hPI❯=$r-Ms7xKCl,Oi^j߽ wVśʠn岨jє~ 3;4V qE0 6O,2CmS>}S#ڽ}j9,xh,dL_G! 4M_HuPSI0JB&]%[ۺܢR:+NMq=Y5rJ5[ց\m8 >2|C$KgLh:/Lԥ S+l:M`[ZFa>\J*m.T'VKbyգ&n1v6eO?Bl/W\;ݾn)Ьӱmf\z+9a A:w KA/ $'ʦWWFeh~ī1D#_ec)CˏsrKyOD ni{>,cFY[11 wBxmpJḿf#DYu/Y<4M.-g̵ºSd[L#.@Lh%׳Z;?Vo)1,e / r؄,o-jYB$TGjj̕'ÑX>qi 2[SQ% 8ac_u< 1Ah췣S3mq F 6>Zɪ!I"1I+cCM\vjBf1qNrQ:%4w[p|pA7oѴ렻}VB(]ygzKg9V ײWU%\ bS*ǢD/߁NCCcFt3Sw'iq:DCo'L.4g!3=hi? ng4˼R{sN㾈^^(ohԴV.9XU4NĆYq:H+ )NمJs܉t56VKaWzȀmr JЇOzF<-[5cC1 |CqpByĥNb ;迬_?6p坂(gH!X7Ԁ9rL"FjnA3mP!Bdc$E` `"[bF|/|%֜ɡ]QBDq#q@cܼRuDz&O 5 >T&crh0cX/K>t2ofu|VhF>[/pb6QYL UX#*,Yf?dM?W|@YӉL)3 *d6eq0h캱N$B:Q5l..wPk .hQBF }-{M* 5f]ژ~;0. vrX(xԏ .8He_0Bͻ,:;iIS1j]4]=sJM/9AG.Y× Tǖ;q=zŲt^^Fڼ~3*ܤoP!ږ\{K_ppOwO,~yVE HȐ~ *_+`CvO. 1tn`"?fO|=/c$w*"ӹv%aի%|7BKvBa%&E;a ku_Ȑϕl<҈56Q:ũ qımL~ȴ?ko坜mOUG) H-c ,48N]lUuہH"MC".c,^XN]!8eM*+d0<6;0an 52˄ >/%OMNZP6#C?(E+ei^/fȕ ؼ\/*O ub)^l*;寣rY4zLGN@ 07@[$i#jou#gDvd_а!!0xD]"RaR ׍X(Zcsu"q2nvx3Pd;#CޱHă_[5[0W~6j۠Nٟۮ!x5p3'3Kʪ"[?aA>&XoxF=Qf6I&z"򗅐l, e1@ÿ Z&LtSKY-cM>mnȂ6+* ]3ф;]aw%%hjjzB/WJ^K~tqD)P ˞v [VoKV%iN}r6iXi cHr9w()@_T7O cpִH<4zn$ƃ%9[dUK4ĩbf~߬QZ҂ɝT/ aoE^%"*6iFjQYPQrf{gEreq3]>&Wq`Tmb^1wxTKwmOaߏ;yũ2M#5?`^_$Nok 7!=G~þ\=ܷ2nbNsuR;Lf)8+m=lCl'̧6mtG"2_umQMgV>'\>'r=OaCG@NS %08hpvIyH5)ȅ)cb"n@^eo~)GrmVe>* ]rAZ x|SMW(x9)#l~D9+|ʈn,dTZp< 萉?goП14LG5cZȶI(3i?bg;o?誽ćaOY)kgJaRL$VLݽ§~d@=tP-{>{rA!82Tc '%yH6 V +S2ߥ@}54[9xB/ ݬ[ M൭ȗK<,WpBav-O-"dA'v"r۱*y]@coom=X( YK ߲πp#f`e6ma?h:unx1 S>ֆƕC=\R uYc!Jq[)V-j?h_.3T\SxVA1 3+|rXuu'arTE^kxj6Ae b3/L7Vݨgk S{jC}"G3_ \*Qbf_Z^+Dx4jb' /`W'?[(\K;l@c*P"B ilgۃڲ|@*{ad9MwVy+P":1WdF/YgNm2iOgd6pc HtpNcz&:F _ׁ[{,edO7 i }AeJ_csx{b Kb߲X}`ٞ=;L;Ƥ*5Q돦biq`Nbz­e=Ixڄ19R7M=^^&iXӜ9/ʌPB Ӭ,YNE:fFki7i.\ %KbyGʫApazZ״hj/$SPvq.ϾM("\!7вg~^YcrN#q<%һ0yC;\Q;Y?'/rӪy]4c`JZE+^Wb-}?w 1\)#* X#c*uVIt}Zbl&gbsmH.Loa:Q,)v?5x:)..oͽqI7yL[Y4lkm.A5kCAW:C ]vm.bnli^:E#c\BY0K66bf[mzQ{5tM^{H%xh7}:5wk7:GѬ:BGDmd縁FAc@)GW0:_OGƠULOLpITSJVNRЅ7fK>b+B]YD*AE\( "R#$R|:{ay4nPqBz Le5Ti=JpT(w) K?t<ګeѮȭ6L,1H &Ԩɂw/XVi!$>ih@&geihlLĢ 3kk5q?qJ2̂0/e#xX7P\]V!ڍv1aabhxl$iX2h7ذBz4aRE)8- Jos֟v"Kbd9{#mVQW> :GQ?W%Ї rB2hA:"/E(<* MfD%W6 -DBYPlr8VX Kuব:We{U=ԇ lK)B€-f[Zw= {pOd?ar׫tSq{Faj![=F .O01_̦d GWudDQKGAvX~ZvȆ@sZJ)X+xqEx]2;[ fˈg`T>XaP/&@^$T`ճ37Cw?qA>9Y%)}y6Jl>'Q=JsIS<`E \4:4vd810gA, \sSDzXc<|D'><Ï>ę]Q̣fۤK/" lphBaؠ:h0ޱw"mjOh&y;Zi=;Qv.c i 7vgwș JONίo`]}_zkJ`} kdXz _Dyp^4d2̻sa7kaU4:ʳ( FU 9#R' ˜m/tfƛL-Sae 3[Tun ^޽e %n6j*kRtV\=}Kt ϫVMw-?~G*\Nˣ s ]&@L-'C8!5w @T֥DMTdf:5}u<%4BS^ʠ)Sw6s&G\$ڰ߻p%׈64?Fk,^<WjB#>3Lt.OG !9G?P迬8'|>n9R>#H'F$y{B!:.=Ip\+v,Ѽs8q ƫ?Uqtp *qG?_WjWM[ڃ]RUdE,#LPVX!i4ç6Ow+1GP'ӞwNdx`U9chlnf(iJ}(n"c,t7v'+mE,l%#iP۝RLY4^޵MM$i|Q#>i)C5br Gsn{]av"a%r@cOyx(h8m[*FWt_oODz{<@>2{CDzI5⛀dݪ>=Zǖ7 ~kȏoC<}pm #ܦ|',sۈygsi;%C@#)>zhW)|ec-T7Xx Tzfvc=KЬ9{ DDl#1 @.oB7x!BBY; |~bV| CDi&!GXl4D ^5uk66/WPlKCnD:zӻAx\6 퍶J7ڜö]c5WZqx:Z|4{YisQ<WDYU0}NGQlb/:?L@q?~{B&g-URNW*?tnO3'D+/TikK=`l*CI0jf۸fߒ9'~ m>:,[yXK!ކԎp-d"٭xd 9g#K6j}%oo`a^ywCUfg }e ۴_w8omH#\.S<)O&l^|+BE\jw`IȟI}Hkam HUT>'b?Cc35i-GY_ ,JM_~ S_kawRZģ?٫3GP6R.k2&xhUyhg#ݾz4km5^?ٛ] *˃3oaEod݄ "Mc[jO,)^!+Ur4|Z1 /C7Ѓ>F@+ `1 efH?B OgL< [`:b{j@Hc3@ȩp46Ƀ{P`=s{|њȯ")@h(B1߇`\{iD2؞F&kuReh$cQe<ѯ@%o8FU V{l\)ssŲ&jn#=F 9b<C ѝq( cJ 5m.H}ok^M$ЊE_FKD{ߊ#LWQJ eԊ7굧$qL(Ny3ʦH FtJf1:GmUpV+S?Dx𗜉rosx.`ﳇ?j糱]t'/8҃\Ű|j5M6wvax\aK!zZParXl |[ȥ"U*U_=!tgj܉z;~/+`S7vwUE]|cPB3Cz@3WL!Hф9%|g~fU:qqR`04 lsVioAh^<:~Fm" *(!5 ]E3*E6+ Ies%s"Ot~ C5iǬqs ļZ2qmWƮbk4oL1ZFD-.^C置WBcͻ [S/W9 /ҙCS;j4Rt۷EsCBl+ fJ%8lGTA`s1J%HG} R lKsavݓ<,j(lcN=l 5,_oU ADYs]&g $r.~x_);D]To !V!Ws6ۡi)̧+T)qMڛs`"& )ЙF`YQ'>guQXc{mT:e^ M3c%=ECntPDd|.`{ֽz;Yw #岅*Z8o\6o]SIWU^@~ıCePbot ܢ> }o ҴorUPǗXmȎUW /Mإh@4xMcTm( wykB4bb#k}M5`PMi?4ǙT{VխfWGKĦxÍ"xSeQ Կ=KѓIS]_c N]mJSb S?TaDŽc d$4c} t|)E7|W2 F^7g0 ү/|@Fm.qs= QF&W^,q@+nUpDt:`+;m]m(4AzW-p(^@x,/b# ]pA {zg ܯź_fBul N{n_+HW4*qfmAA^ThރgTKaV%F翫EhA јf VӤ-{VD^g#tOߙwT}X߲`!z5;~`W;ՠPIҷTb"o-NbCˍE _|'JB')%7'9% J!?He|JJ%^CɛGxG/?peY*8),ժU担n% &N TE˻Gcꍣr~ʱhBIeywUvlH8%څߐ /*YUrU -]U>M)ːH&4Ĕ~UN!TAN7R'{)dΔ:)<\AiALqQt?c?Z$#UmS,q ӟERY,< (WBUKGnJn"vڶ|ZZG&woi``IS4daDD N J@Av1b\66 {1HexQӳ58K=lctm: ާOq0hT9:/TeMXmV|w/aQlHIdP8no ~P356=uR]u-9yVM>eY7&`rZkzQ%Z$e!q>jed/Д=~O%,Pt; Cc \-개;ż 93[VZ<$EtqyB)TOQchQEXM@pæT.s9|LNZI\i _+Yŵˤu,[j*->Z>ڕ;k"vZ :O;Arnl,/HյTmO t8 eዦms./&֌li)l6K zbPϗ$X[/&'D'.NsCpm+.O0BQPH=z11 !?7Bmjp=|BQ'=T5߬fbXZ`@`_RH LJUrydwx*abBAWCɑ<` c12Y+f#FYҢ,:m?sAbku :{TcMn?_x2W䇇:yX$ycg=aO' H6R1]59[0kѥVD=W;H~26k(C{Y6S˻Y<3Y>`OrL$W ozU9[ޑk+^x TwC6m3?ҞKJ#f)IXۼ.KLBA6Wd '`udoOs`cKs8湍h@M}٥~ؘ ;>LBΡ*; 0ہgx4"Xؾ dRvXޏ)vv{G@l(-ȧ3'(5qêv}37,o P=Cs%Tj4Bxr`.ꊨMUwOmXed[6? l{[찰7arFXd3c!7Cn3>I]p~/) We4\x7v$H=[n٥5U@ 6Ndh<)% ᣶]G .abCG]4JH:p( G yy k!@1g7 <]qޏ0 ](,tx)aa(T>_R 0vszBx'٢<]FyթY!<}. Vdž ~(dv?RY+k4w}SlX}MRy uU w5L&jb3A yL9:A18ĭc4Z J TJ}Ό1"A4/z_LiV KwVheP¾-!-WYQ@cT"zJNY+Pw~|WhlV䴎!jmB2tJVBƸu%f",>NVQV4j#8Tu7SBzʩEmH{;7}QDB K[o{i ؎RZIE :JQQvw &dsń+%u 1LHHPL~2e!<۲ =vEPI] B=`j[[DXbf/ulwj١wlCc*f1v=i=$33ILxYnŸe"<n(p\BƤfvt5CYO@14i{gaͱPicD𚼸ۿHۊXs`٬_LE5glB램~ ͊Ciiytk)PJ:=[:^_QbQVѤphX3\S ! >wZ,`d]Vs-n G,+idmЊLƁnwp5N4o9E0i}2>lXL Pnd5OQ-|olzK~^@J< +"&?8#gHDY)q}x/&XˮKS{( O  `[?a6 M =WRFT`>-tȧ|K˭_ؗ*8k|JtD71ֲuCQ#Nꝺ#sa|hHFiS| (H6:N5*)1 ;+4weaЛ:VHc\ojpJB'VfyVSr\%yL֗ϮXZvv O 4J+t~sXOs)F5""ɿ-Y[Z3`ȹ|uLaK+y,/2S 4޵;^1A dkf`Df1mC 8#bTM*x(W5FP k72va>& 39g jKn eݴIyJB+'`8JNt D !0Wp<̬G) T3T\7Z+<:b'ĀVڼzChVNgv E^YJ.$8@|[9IDT-5k_n`u5/&҅m`:=Yniն

}Z0Pq5bltXJ}EY9<=XEץ>#:I &$fۛ.dݢmfp|b*wQ ēYvCTc`^ Y9C({(~X< ԘZIRU4S/-<1`z?aӻ 7S꘤bvr?s|朞O[)t/o 韛( ˪!`\ˉЭD0CMV ͔KݺÃqEk%3*G kQU^wzS(<"wGNkqZSJ/0 =izyh :0"[ev"A o(,V7כ9Y>y#eȊ|P!uir7UkZIU1xTU!5}G.F0Ybv(1 u{NYor.35%ޕl 0$*Uz G9Ppb\l.ltL y7EĽ`I4Y1!Fyظ8v |P1_g|=QpD c%+ƌ PڦI8ZwndxR L߰!3pun51d c㮶켍p`BLAȅL͑#bj]H<y u\R[ }r\?%CRn_8[fTN3݁pҐsWo; x5._LV*i:f\xVcEICM-vAJ4cYϤ4$KsGI-|Xv.hosz9* MnSo0$:(O~|inJIq;vpOӰ! ^k>Gz2?K [Њ\5 >MPt/ޡ y2wZHPϘYExB~o~[^(h/Ά0lE jf<ha}g `96 v}rt cq).rϊK<<_)"UvN8 @ȎqԽ zzZWV~I 0)R7e}YFyx ԇz55.yڝ}pT]n ""Z ԒJB=`za5w˩7͆2x w8άP:Lp|%l|D=odn`H`OeU;9/4]䗱}TJ_0ȁb{: fOJAU>.cį$dh4nAcILJ$dH[H┞Nl u!5.ֆ?(Om~U/ALs$"w.`wէ!('ͅ؁)3?:, R2げ.%FqO~`IW^8ZX?Vf6kx SNZ룵vG&rsԋ :;4z S5K!Q}ܯ푓V }XUmd8Q%gl0>]ݭA! K46tL箪>{n?1g4Ga ݁i=tѳ)?ꏉ%=rҧH$1 /7e}5B`n͢L栥 . ^I]*tG8R-+bC+z0Ɓڊa*I2 r;/F^F DL`xiӟyb$8 M(<3!)|N2IJ@7i'B% 4uP26׼87bY_ӬdUt,f2c6=t*TO03l/M + w\\oגˬebS\v'yqc5 7 flPwӱ GhadjD$<%KM'JxmKЏHȿ{Rr[ 6E85S3^ޣmCn\۾bQPz=3>jy ƚ|0e2!sv;ay`*AKU;1""sd8C F:&I2㙋G2m{nRzSͶ8(1C~轞w-_SwxαY@FjjZGj MuO3,rW?q:Is|Sc[1ך|h:{\3lKE4>ILU{C}b.t~9MG0mȘ!sV޺B'shӾrˡp`YrQVl}1ѼEJovB 8q"_~'~.?BB[>߬ h*>E\KA Ymh75M/5 q9~høb##rzOFQξ0&D^k"QY&Oz\]n#9I8թ07 ORPz־Յ$- pgyڔ”\o͝l`O1T"9!eay!δJʝ Amd+} 3Ƴ_@2I v\0!q{ 1XUZFu?Q"[z`OU33)wEmsV뷼F()`tNMn` 3:㓬p_ P:œ|hTSV2}Aڷ?V1,57mkY>0K'h'nqO6Wyď3Q)lpTkFw?$NouedL190ۢ1F!x4Y>|\_bWc= 6kH()qV?T*f _CNP~*U& ֳQ!e.2lzӐ+ sfl">HroG-&dlOG=LÌ5jN7V13YzRrden`j75FTNzz,Fז``C@nU"g,YDnD$nkU!&a]kռ_(LiIHD`kIuuA")M+T2%^[|ZjA=_ɁPܴ; Ľ0@=2mSջ^GI 0CJ P)aGh_g~ `68_qɥC"SyuFW&wlzffdh]r)JU.3]\7nn/Kr?Ժb95BmsrNYrsո]kP&RXaDͩM@3 *t x}j _^s#ԓ,M&vCqړ6kV--= #Y+d[Qǚ/^SšNOpڎO-TK3n>Aܮ]=Cp\6`-GM! %~#Qܽ~Sqc,dc `%QL1#/q$씜9Ny):G#NjS+%L]Ɲho*V ק}Co\9y#wun~aA &.+k6Yj7 3S;<}ٜƠF]b 8e) V$4Au6be-U-Y@_+R P̋G"T WEPy+#gb~ ѽMѨ]ZI}؞=p֘ݚ879 c&RO5HDow5hl1f<+wU->HO,v冚9 {S2_r~13̄G̗Mh_t廻ò!NfͮHPeҔ ʂN/%X  5Yd:] =Eϣ~΅ȋ:ua$bƚj)75q0MKQNjmny0kIF,uKHQn@09?T%|nyów\w:M;F>khiJ$?zsIh AYefgS߇?W#(uz ={伻y!X`'Mv`몠aJ79-|1 j6_woGkO 87 E?c[i ټ!@wl5CCꛔDFI{uȷ?}X% gD *cB`Z+m-h+R\Iǜߡ>?ԾB6#al\6q!5;m#I }-a3sNǘ¾g|^8AS@?wH UF} F03 FD͐h G]58ۀVm Iquʌ(~Tz ]NRҵ.1e|#mdkX ck*?4zG1b8ykA;@%^5v[6/sžl"}m)dXAי=jjfHzc}T8߇>P~y6\rN=M mة;hlbqA?ea bit+Ţ1z_G# !&{ŶsU7UN{W2mrPΊ *Ee`:ePRm@Q#Ln1*~Gnwy:0L >( H pen<(}/DڷFP ӒPmɚ o>?ں~4֔7OpVi^4U!Y$E twޟ /ђn, ˴V3*ĉ.f7أq;jJ,)OwWJ"pT% Plcp,Qd{&hf"BYRoʿA&i`iGk1ޭ?i{TBCh6d 3 ьCD:L`fnmJvMA>bWߦ'Ž,XøCї/0|V7L96%ڊ=c?}hk0HKZWYLX{k]7D.o@Cra}!6";Y+9ݏ+*z.I dy..U4NJeGW"a~0uDbЧm9n즒w9T|LRעK/Si xY5o 9avl+bAa[T .\G|6{tޚ ]<:O #7l97{r#ο| БI  ƌ@7;kI93U!݀mO0faSI ρV7%ou͇vđ&mFdj1LbĐbY7qq!wS[Vn>U4|#]{CzC<^ӳ>-brc BJ!CBBX jVS}AQDujR`W@0s}BNh'OԜT(0{ՀuݛO0(dt<8IXWݩxS4# GHV,:GXo-sZ꼚;tP%LJ8U{}99.A oB1g(|\ਫ਼dKΏ&Dԉ{ 6W!(1(4 &t=CR߱Xġ/u VxJecx?/f sHdYI>|h|9FBS+X/S n>!7Ry7ǔdB ^JWZIɌq5T[i1Sӑd*ه{el;(ND?7bX#H%_ (Hg:;8#ѱ􎋪 צn=E,ů{bSc>#]]:ܶ l65k#JzOϑp1*UmP ,PLtr&W nO=%h5zPKo1uwe y'claL&YI'l4KBcP\,p&5VgflC16yw$sI^Y͙ lfm` d>2PR7 }͠ңn:KkXEaU¢Mݯnlb*.1*[^NVqnxg,Xx_Pnz&y@" sIn^zUS=3J'-31mkx 2wB$N4q\(2vN_,Rw ]ZngZH%mTA.GJ DžLO9hGh!fw5vǚugI BLrBY &2 <~ A9͔z*|/9įVX6u|'a/4ɯR5{K-L~LN%RF`8Ao vt2ߤXo:fL+Ȏ{i$nآ(#ied<<´4hc4Q!L_ 4}Fy2(Ƀf;7oOYC-I%#¾5fp^! 0q5EDeH0_NЗkNIOGJ~1̸rNONIuHx FUo3et8Rn (]H`-Л,?둩1nt9=a1e]:zDN:ě FIJ\VRX"Pc,Wf[~kY[B@$W&b_jF&yM~ptZɖj7ff#q_e5_~LhOD;ad S+3Za^x/hu[&#Ίd _M>cWȇ-l(lڹO~3i yb#>LA>HyAOz㗌Mo߼/khy`tL>c Gyr w#B"4m d4]-iQ5xȬxig2ā `δ33!( X}4Ltq.7[ 1ě|z]8A7Y`>8M&lJ; !,r]ӬUM*`2D)p^Dˆɦ͹myӗ .*G)ƀ6tJ슩Li'I7NVk%:Eg{A#EIVљg~E^v ?[>- e1`B`.om\uDQHBWo(~Yܔh|`^| M 87 # u5Kg8ot ٗ>2@KFg.{LŧQKDF vcM-cj J%ߴ7ӂ+HO fƞRLztFtI1noviưYhP;e&Φ"5dʣWջ!>v"%o,#R9o- 0IUsYJ!ϐZϱba3V[9?([R9i"o69/Y??yR=`e|'E6(wJ1-GSC:|G벝[}H܅~Rh@HTG"iLiN=0rX]"yN[@xs_\9/S:!i΁ `1aҌtݵuRس{'3wy z^< 7a..ޜ-* pjM7WLKf=W ;j~n+N~7;wY,Z?BEQ5EٰD,H7 (Q-SX%TUHpۆgOc:`B~7PTVГ__'8|2n m 7Cr޾V~rlG[R߭рˑ=/jSԞSZ-ƱLP{%5$I0 ;%Zt&k ;џ¨o;Ɛ9K*q4CH?*Vx~MMARtXHDb[`2"2 Esc܈Ό'~"4z{ *]eI[eeFxΚ5gt{dY6F:!39[\tآe 5*(wQMAq~B|:CWcYnu*b=ZY_n:_n& 2'99lL|Ec%0>_A*m R4Ia1ʾRӕ苶p7}a& g{j F0 xONFUNꎁ1/G0:u$U1 | xUkڈ  d+І9nzwˠjeqVS1R|լys#O`3D&.XDp )ar VkȔr4e䊰sa3?J၅fܖ~[>Mroj  ]0i ͚شqTd^, X(z_ s/&J#aI򇩘S$5{h<*{GFqkN<<g:R;̍q3)w0وSh1M_MD; ?q.ʚ~ ;>b!}Y;MbʂAtu"5= o '>`s|{>ډėi '1gZ9¼:M^I d7KLB/.ĭ@6Fmt3Y vDL{y2ZIEoT`* W&E2cڈd&FIDDB\}|S3n?OP"}IB8Lf^lz a/N D_焌H9l#utCg5KFAR0/J NG12|Ouŀ|B싁݌vl;%>aMyM\A=_/H,cѝ?齆7pqiUb G6"e"`e]_^s8~Z߼Xu~ԧ6&OR:mNڰQ+~0p*3Jnj q6@ewVD 1ȶ5mZG SJ^lRd8(l7t8į1^jj_]f <8 mЇˆ`bCf2(sCIΫ7gD^)MJL,yZ8TpdmBb2H;%W 27DGe*1O п5bTxwwĤ r-0#t"WVv3ց?xu0 o. mݑOJfA<~& i5HAg_vGk/ȩЍO?E,Z,o ֻl45if46Qcm# 6"3;H8-D&dh $o|3 oUXE@A hzjRu qU/1pIO?cMIV胩نk5n ch 2(4+,``tVi !)^4Y6ZbkmYjpZ:z&v8܎p{piU4Lne[9×DE3=TePT"9Za Fk0QW뷮mXm2ĽMQUy8anbCȼTRԣYDr4)yNpVOi>;`suH$r["?&:i}CY"\>`=%B' qXc o/ڳp5i*ϋGYtP1:Xť^+ ';h='ڵb9d Ӯ:8 XemhzyFqqC SP݃mw?eP;J{Ǹo9Ue'G}x#$TY |&9&7vH:P)7xl0{_J9PћrhOfP3AW'T`k;r$s/DVImfM4-$vyfVUnWcs+V*xdds11hjыK}\=Ӆ7D]/uv\<#NT9Z~߂$Ug6>)LoqThl{Rf=jA!b./) 5PIJT* u^X\J^M-]-M>'쬌?a2 n@V^:s?'i^BN8R|tsD12I't(2Z.ɳ;^y,;\`&4v6 nG߃UiﲙB-G ?UܡQ">1%?[Qf6&$3zuVo.)D 2sSY.S6z+Dˬy8т}(VgBwߋyjsыDoxB{`%G:x+#dKlze*t6A/S<i)>"!;7~/C!]`Wn o}D;] K3xxSwR-m7 pɀ?X3]#@WalnI[ gԞrշfbbQ\Wmzd&uwUm"{Ǖ k6CԖ{jwƎH\R@ٍ@ nKd {*}ֳӻy?'udEK(ToHÊ!)v<9T+SO(ݣ"sq _پؖGN1S9,NaH1=5PEI7{}ּ@-<1eLX~_,ZȈn+]A>H{qʎW5xl.?obTgr[wh%.H;Zj^(J7Eo:8Rc b *=(YP-15=hԕ慳pkH]ה#t6Y l&0N?xmY>$mLEʎc6msS SnU)P i3wlrq$*b) %C;+g% :U D.,x-w2{XIo>7DRe*Gݫ`Q1nG'sUd++yDbWҳq 4⢄ o%b5_!j7 : 타']K:{U4J5fbO^/SC2'52i *r˘#u6Wl0Vbe 6, S%%ıkaþ?IՐI>|b~pJ 2͂C.JgTbC]E'ؗm댗<!uA\^@) RO[yo҄vi J]M<] +pF&D50RO+uKsn"$j_Ɯٓn<`b~N*kZq'H+ Xw T~{ ?Ѭ9;Mfn/(Gm2zNx9pUz$ $}`@|fEX d'Zg#h3?gъ{]µ&݄j=p$,/IJ. ݵB1KLp_@#mp~-Qq[ FAV7V񱃝-XVt#<x2A ^%U}EɘmhĞ];/fܧ~}cDZy ͙ m(kmZ{01 MLBR3,wj:iX5'0GPA c lUL%仪7Z =N2yʢܽ (#/-+9<ÙΒϷ OivˢE0U~'O+ ȢX߁ďqzikO2? r[R4{m3l b }e5';2q VXG3b M" QOkTM^BU}_@K)Wn|@2,-V.T+&d;b۴it<yzԏ0(ćxTu?ۖh+~9Ѯ¢Q7LlV{v Q?i&N|.7ٝ*%/@D{,"WI{v F,u g(DuiTV`mʀ*|m>>S@O,S@<<52e4Nt٧%fi!Ѥ*n?+m닧{kdXxaJH-?SEG$Mci8B%^Ů@2~5\ylAMp)N\Ak(n4~>[J+U&%5$* 0yG-U9j_@$~M6Na]b,]@?BV㟮6S&0RU$ Ao$]hId$y Pp ~ 4/Dٹ̏MZ5|>Gzk2JfUCSl`HVcPNDzZ$s ΞlGs ]#|PKL{te d߱erl1S)O:ڃs=[fE, 5aP?.nzhݷR)@uf)'bm@N,_oWӊE-"N}Qgh>Y5n2AVjiCdH^|&r#dD 65ildcИYdwÀ̜cEXgβR*5][n!#ix XVmq}:L!\L5>S jy1N>U{ULP~ Uu(΁ \rHQm&2KԡA>|}WHDd]Ѥhw j/⩵gK8J_1#g_Q{+ ]@~]5ĘF z]ߕdU7A^#ɭ3vװYD1®w uЕs $kuϽp`]4\]y"" YXyoE6MF,u:|g]zg6&:Ss>w|%54vmcI:./h"FI1f#4p&omPM~mdM޲洀}ݖ6Ƣ,\QlzyB4Zۨ`7ƥ=)7Ȳ 鞐=@>FznZv ck:m65Do*$({ ]tl-2{,kFvE7d :=NC͍UzӖ8Jr!n-]1zܖ<|@!y@ۺ>?Y(e9QsG\ 'hyxd4O%%Y5[kY'DYӑV("qOLKU|8|fpJ>f|ʭuRDtMsݡUeV1BI,UՓ\\E)>C9FځƔ)`%5U5ᷠSނch7c34~)7}^ds({ЄM@Qj)uHQzg6B:}b2pdI@ΛzKGTPMU3>~d)vv, X6~X¨F敖(mOV *:HWTOE@$f#R@'F헁#/Puy?"{l\ff̦ĭy39GrN܀?7F|T7P |]M%` TsodWǕ K>&t-ig2l\eшXA8KWѝ2&)7SÇIKnE&Uft.,~e+UE<18ڨgEv3"'DfC,H6*jCP۱q1XwƣRsm=:.hsZ WޝL kLܾ@Y*T*>l sEf,3nxi.WY#'I;5;t*QhMhy 3oEgu{̕XcB^\sZn*LG}Z ^aL-& yFQPwC;,'<[[ f̂ݏֽJP'Iڅ)>_' c@z8$9JEՂ;h? v<$rjR)DͲ9Kw vdN2/p|"yW!%$+Gz{TI?=EB7 JXn?]/x7ԷNy,1qnMCFn_ h{b?\5W8pRܙCewΑ ,Ζ^1T!As=AK8:7|{S;Y6?IG_>jZx XtDDxryg 3lzѺͧP:5J}VSk $qCP FAK[rd*@(x}DRMDo\1xTHj~N~9(4.EѠ+>/ݤ72V:P0"bvB3mQ֗I5`2x:}f7H;./~:19\ZeJ\nl$zÜ$@C3*syүk";-7g;`7;H;s1MhyB,u+8x|?j8NL//;a¹I7t3T6:Su]sIF6$?OZR%ɬ0-hE9Pf<% [dIUGh&l_Y<*o5bBEMVhDɃW"ۂg^_nNz9^G+Mc g" 0&  @Uy.WV}40HB;ʯ` 4Lh4Oij؀+xWͮ &&.|[YUpzDKI ިTt5L 4ܡΔWKp\aB \"c 4ڕ%iu!=ϣjzؽfGcs@ 6fU%Zyc5<O! S/bNtտ"LW|(SǟaAZ OO xj,pMb7 ܼ^XGx2eL˓GTD9|Uq5z$bCAKª4؁!w}[Wx#Kb, UO:MdHz?%&(7,9po9*Ѝ& ܯpGMXw-E%4BMקUw[TmF޼##rEʳ}m4]F32։0eVN4Q8S3E},gg󿆠;m !}2F  xJlG-BJNpHY+wj~LHWeJ.u^I/+(2XXf,ۤ{SO }$5r- ԩ]}KSPY/dySr$ͻbc5nw9E;ak|{SK6ڤTbW^.2|?ut^vJvי~-ԐM!fIv.npB&/I ~#a>zt;vqM~Ye >2ZX( |.u,NL|JX5oR#r}6H0z;4'㺂3V#s#fS_mox~nAK/KU2}6eQ0 # /: M5s,T_J3hd(Ej+`2Y?6Mh,!8r }|T pC~4\PLSxlfQy_A:xo6.NUMb :p fGwNhS0)2h; _KS;mjod/(pr)g{j8a*8+4$qti\'5ۙxNԼs!`'uZ'tseae 8a Ͷ;/DR4gc /GQ>~tVպ&-xg$թmUL%gʊj-+C'< LN 2ұ4n'.!%N;1LQg~A ܙ w v-g 1(߱ZApH>Fr1#|Ko ~ɼgmtc=Rw,#.xkD@f-Vw[1wJԾЬ g pۚ B*-S1-ЮbRGvlyK8W!z'W~\xc6fR5hs佘p}o u:) Bd#a3[ӭVU6z:b!_lUL |#l䁠=fdweӯ@5M6IY9iX伒w S0-^iXz+ң"J*,Sv.g=?ԐY3nsaBLKfdӓ߇3_k{r&i츳/t 4$\<13e-I+v=*yZ&If{ͽ g?RqRNU,Xgl-L*RniKǃ#; ': ´&2"Îv':SN>w;N?5eoЕ9dh BVy㲗!{^xcVg &o7 t\nq6ҐA^xcI0 дieQFmUrPc*C؛4`@gC ! "4è o/8j]@& "vA k|xkd3i/؀.S8BD1 ATc]K ,foal݇h} &lOj`%_$t=\ :+gq!t Ii:{Vi47lT=v )PrP ^sq==/5 cs);`rcQ֙2&жg fֆJGڌű&XsSs+BX*5}xyAa>_gõcwOց8V yTc'9 * <&)xg 퉂@c:#r,`e8alb[ E}#NRأ 乀*hݬ`hTfdSԶSfCg;^Zc_M`hr9vH\B]q 7d ϛ[MՅE?c&)8Ug;][ h:2B\E%?Vs.).xKWGkd@1J|Oju_d3=e !صt澕x'Jy)ufkc|X+K(H5cЗQ 6S`Ka'z|sH+`BQIuƦj25Ge5j}\}$[W"Xxe[!{ Fuu(v-$e:'`}l@J:שJ|GAu;sn@<פL 9@4TVcf5}9!R vM8kג2^pڡ!ʍ9[}|p5<7e#M2hMEK GWy$8gan'\}z W\>\F@kR?(1FqMKA'tFgFTX n:K']-Z*X)sa!08%>W@ > EOnjxb0`>3Ϧ2mv-ѝ8ɐr5s(m.#I-o.Gk2+){ܗ><>0F]my84b|T^?Ӫ۔!YW li3"[nB%_Pdj֫[q %l@%fF.rcc'Bctv>T+όt֋m-<#ncv_}a956dYtي6qQ1Aŀmv'\ީ N{YE] O=7yIr)J)l[v ݈QୄRG x\\H?: 6x tͮO9_kRL.͜ A @,ZfC'S1?÷.~s.?,zZ[5W2♝Qk%WVn՟!=_hjo:~ԪXe)`kAQ]0v=LU{7 Ɣ;zYU._i3ڰC^uf K녇&V,"Jaa&79p\JlcL^\!WуtsYxMC5|emfP* Vo#;Yx_=L. ˴baJd ьq|"QEȺEepjzv[۬@ . ?c Sx3>=w04vq?TA|(\یbcޤ?Ӎmzk9|?SG=bqlZYev}^FL^@-p9c)++/!#"jH;kwDQN_Bxrx]]ɸ6Y3ț_Ṧ~^@^r*L,^c*Ehgp3r8筤; dm.^эso&y#ddEv2/nܘSꛤ™BG7c4 %`M,40 ro:/=T]½]pFf( ˲̕Q!t2B3'qW\ vUJSo5at\`Fjy8/r[_>~;0&C| <IŞ<_t12 ™XA.ؙt!48`ղ@Xu2}ˁ^hpPL\JB-y!oҦdQDZe捅7OJQe3'w~X81+U:uvB+=Up'zمg WI>@ND<BwZI=~&h>L7˔`{GO W瀚k%^%л)HMA*L @ @Nj.[]Q~m"ݩU|z'Zu?T X5C3E0Y1'A(r0Nvs"v(E+Б$ 7M R!hڪZ'K]3t/<>q;D~ bPK8(eϊ+iq2њxRƣN?d<Y~!~hX1WVne:(KOߒq4\@+ O[! qw{N:. QՓ Ԯ$I=/54OO֙m"ΆOTtS^m(εi] E8h|G蟱 Npd]:׏,uc#V]7ҧa,{MZ/ @b #zېZۺ=u @ x'ϬINU/zyHHiaLr!2[!T¤ck1;YTє׭W Ibh " BP*e@;| HXQc3jq33>QO{Nm`qD9ܟ3FU FBGhM.L14+Cs}g?9k|V>}kYH+4--pKc~("qZaΤE~ܒAhec(>NC!a)]W=rs;6Sƽ0l P30Hʡ&꘠Wc^qάp+}%2=f:HxÈDinj[wİNsD7(Vb63YжG^ݗmSKGz$J&Oo- ;ڴX j=Ѝݳ0uNYOݓ{!4}oEDO̙ulR)tz0jIՋ,u l:%Hp嶸BBTgi=$AŒ@ΆoL >JcE_Y2ڠc2lάdPh( l,}DIҌ@r"B!T@y -e H؃Q]qQEKȟ7ܗvfySp_ D PRsR΃/=UU O葷\vW$w3ЏXaX%w52~澁(!T̩&%͐2 l* GTg@9!nn]gt׬7cI9qwr3.TջvMo՚fׯPqU16[{Q?R3~ap31)r_:eKGƠŧ4EBeY⹩wсmMQ=9_W:ͣߛa)*7|& c7j dqcp>žրkFY p"<Ao˓ߪ!? [M7ssӲ3ǽ݋[K:꺧E\>ˠn$S2CZM3 w8\J+7-Q`z^F=Eze7kmKL[[c|KT"jo+"F6ADZ]x1ȅI_PO#kɡń?0sZc˔֬TQvy[zц2XdT܌MeK}Vad􈞏$=WZhܜEHjr1D-'&jhQPS|}^|Sh4צy>%erE90{U|_ߛEcEdT5z>`%i8]l9I%FH@]_Jmfyrv Dc#*JՁ$ &1 -|9A}3뽢vqG _~b(vgN\y3Cj|H-qi)1ϨʳFYJs={X=5@9QwqǸ=dvW4ŢDlr'!ݙ" !5ΚnsFD?AFb:%0m˾'/r_39 2|kF\S#Hn)ȮV+:[o߫T`qҚ* N-0Y6#j{Cj-Su5e#*_r){lAC}843|F`HCu:wF!,s 6iZ45YbPJB>Pl%!%ncXnZ e%Me&;^i@h<e (6 F~Pq9UJ⩟x(='CQؠ>]/Z3ʫI3Tcrz~TxI Ves}Yy*cX]"Gʰ% Bg ,zlynb6UjEJ/ݠt>YLa1i+l[Ϸ.c(˔0kΔ 5M֧5,`_#OJv-:e</=Ot4[7Jp;6$xg[jBKV}xUAKH׼-X>f| %{̿9ykwo^R3ќجiԮ\\b"Sy)ͻr. ]r}mvMbv@m?M+Ťb)q 'k䓷,\Mwg?Dʃ@Fh28yc l?竔: "?/[dRxOqR/jI[<>xʾfޟ`Qwr=R{ Zc\<}PS#% j+$ʲ]'L"Px"uDlHYADM <"Z=bT=Cgp{Av' 1ҮmObX-xvAOh6Gy(buӧ UvPhrU`<Հm+q uEAi% ň@{wKn-`}{䮿,de\@+5;sVu '{O{ס ovsV}іCdȣ ' x8..@f4~yVԋcȭ?q`$쓊dVO _ۊ%V,0 W8ρkT2P0DyL~g TIrpmq99v&EYa'8|-?R&w-{Ktݟ=f =\l#z^iaxzp!]! 54@Lc=ĵ# I8GkmFWsܓzs%s2#_ޓSoV߫ KP֜'Ȫ]:"ඏdJ:2rT"d| ~;D} yZUށ\!]l#6dj\N[nD vvpÄXE T /daߘG]`U0|* B68os;-F 3(I؛mZӃ9 B`+$TZ? =y_gLT;.jHiNRPE?uVHe]jL;tG؟2J*)$?@@-aPq1)Z+{@O+@1$uOTRdBioHsEnpXDtl:IHحxe XN/OIЏݨ.n"PycMdjS(A$0y E\7l'}/d9]xYJ;ц;י4 u頺> x)}/5r xz}r5lzVȘ֊3#(j E=In1,p;bo`,_wecr$f,$i3mʃhHb R/ՒC,˶E R2g2d)Gaӽ33Sy`j,P%[)A4HEBHZr~-d~o_ύ FG[w}<,r/'zsHEl ^bBbnAcdiIR.&Vr0⪹tdy{ƕ6j,)S񚈭.^1MJ']JF PeOG N)PD_tcf_4ID{m E5p%64̩KaZx:΂O[Io(5GDA186wC'x:&9d/nCU"7?~EH}y [,<9#IJpa;}&A_A~OcCʛC [JcKc00l{ .f$ {ܣSATa_חn9̋9yVfLO /XL*죧Lc00kZ%w7(VZ_Vg*m2/[fѢX{tUuqB8Ȁ|0ԂU+OPD9[R`D:TfhOط=+QEQm/.ζ=T Ʒ1yҕne$#ҁy&V]EKb"TPФK3/38eGո+KGP2eP p^1؆_ND"$q/4CQbqTNYkVCQP -#cx#v᜹ "]o"*' wB~NA{@9p˾)VPBF>r5}兟c%QRKHk] U ,kC_.l0#/#DZvs#O@1)(>JC @|ѻ_ YZ